Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Texas Department of Public Safety website hack ATTRIBUTED_TO Higinio Ochoa
The Texas Department of Public Safety data release is presented as another hack claimed and published by w0rmer.
Explicit Confidence 94% · Jack Rhysider EP 63 Details
“You got the DPS Alabama Police Department; that’s been owned.”
“This CabinCr3w is proud to present and release texasdps.state.tx.us data.”
Alabama Department of Public Safety website hack ATTRIBUTED_TO Higinio Ochoa
The Alabama Department of Public Safety website hack is presented as one of w0rmer’s hacks.
Explicit Confidence 96% · Jack Rhysider EP 63 Details
“The next police department website he found vulnerable was Alabama Department of Public Safety”
“As w0rmer would hack the police”
West Virginia Police Department website hack ATTRIBUTED_TO Higinio Ochoa
The West Virginia police website hack is attributed in the episode to Higinio Ochoa/w0rmer.
Explicit Confidence 96% · Jack Rhysider EP 63 Details
“The first one that he found that was vulnerable was the police department’s website in West Virginia.”
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
Anonymous PayPal attack ATTRIBUTED_TO Anonymous
Jack says a group of Anonymous people decided to take PayPal offline in retaliation for its treatment of WikiLeaks.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“a group of Anonymous people decided to take PayPal offline”
Higinio Ochoa DISCOVERED_BY FBI
The FBI investigation identified Higinio Ochoa as the person conducting the police department hacks.
Attributed Direction flagged Confidence 98% · Jack Rhysider EP 63 Details
“the FBI had enough information to positively believe that Higinio Ochoa was the name of the person conducting these hacks”
Higinio Ochoa EXPLOITS SQL injection vulnerability
Jack says w0rmer exploited an SQL injection vulnerability to enter the West Virginia police website.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he hacked into the West Virginia Police Department’s website using an SQL injection”
Texas Department of Public Safety website hack INITIAL_ACCESS_VIA SQL injection vulnerability
The FBI associated the Texas hack with the same SQL injection vulnerability used in the other police department hacks.
Attributed Confidence 89% · Jack Rhysider EP 63 Details
“To the FBI this all looked like it was exploiting the same SQL injection vulnerability.”
West Virginia Police Department website hack INITIAL_ACCESS_VIA SQL injection vulnerability
The West Virginia police website was entered through an SQL injection vulnerability.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“He found the website was vulnerable to SQL injections”
“he hacked into the West Virginia Police Department’s website using an SQL injection”
Alabama Department of Public Safety website hack INITIAL_ACCESS_VIA SQL injection vulnerability
The FBI later treated the Alabama hack as using the same SQL injection vulnerability as the other police website hacks.
Attributed Confidence 90% · Jack Rhysider EP 63 Details
“To the FBI this all looked like it was exploiting the same SQL injection vulnerability.”
Operation PiggyBank INVOLVES Texas Department of Public Safety website hack
The Texas data release was labeled by w0rmer as being for Operation PiggyBank.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“Hacked by @AnonW0rmer for #OpPiggyBank.”
Anonymous PayPal attack INVOLVES DDoS
The PayPal attack is described as part of the large Anonymous DDoS activity.
Attributed Confidence 91% · Reporter2 EP 63 Details
“Anonymous hacktivists, hacker activists, have basically gotten together and are exacting revenge”
“as they were doing these giant DDosses”
West Virginia Police Department website hack INVOLVES Doxxing
The incident involved obtaining and publishing police officers’ personal information, which Jack identifies as doxxing the police.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“This is what you call doxxing the police.”
Anonymous PayPal attack INVOLVES Higinio Ochoa
Higinio says he was present in the chat rooms from the planning phases through launch and helped organize participation in the attack.
Explicit Confidence 97% · W0Rmer EP 63 Details
“I was in the chatrooms when that was going on, yeah, from the planning phases to the kicking it off”
“I was definitely part of the machine”
Higinio Ochoa MEMBER_OF CabinCr3w
Jack states that w0rmer joined the hacking crew CabinCr3w.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“W0rmer joined up with a hacking crew called CabinCr3w”
W0Rmer SAME_AS Higinio Ochoa
The episode explicitly states that w0rmer’s real name was Higinio Ochoa, or Hig.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
Anonymous PayPal attack TARGETS PayPal
The attack on PayPal targeted PayPal after it suspended and froze WikiLeaks donations.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“PayPal suspended and froze all donations to Wikileaks”
“decided to take PayPal offline”
Higinio Ochoa USES Doxxing
Higinio published police officers’ personal information after obtaining it from police department databases.
Explicit Confidence 99% · W0Rmer EP 63 Details
“I was after names and addresses”
“Pastebin or Ghostbin or one of the bins and then send it out”
Higinio Ochoa USES Website scanning
Higinio programmatically scanned police department websites for vulnerabilities.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he would use his computer to programmatically scan each website to see if any of them were vulnerable”
Higinio Ochoa USES Twitter
Higinio used Twitter to amplify calls to action and claim or publicize the police hacks.
Explicit Confidence 99% · W0Rmer EP 63 Details
“look at Twitter trends and then inject our call-to-action”
“I had a whole workflow for that. I had my dirty images and then I would clean them and put them in another file. When I went to publish that, I went one, two, three, and so, man, I need one more photo. I grabbed the wrong one, put it in there, and hit tweet”
Higinio Ochoa USES Open-source intelligence
The FBI used open-source intelligence to connect the w0rmer identity with Higinio Ochoa.
Attributed Confidence 97% · Jack Rhysider EP 63 Details
“the FBI did some open-source intelligence, just Googling things like putting w0rmer and Higinio Ochoa together”
Higinio Ochoa USES Python
Higinio says he wrote a Python application to monitor Twitter trends and inject calls to action.
Explicit Confidence 99% · W0Rmer EP 63 Details
“I wrote a Python application that would actually look at Twitter trends”
Higinio Ochoa USES Cisco wireless access point
Higinio says he broke into a newly visible Cisco wireless access point and scanned the laptop connected to it.
Explicit Confidence 96% · W0Rmer EP 63 Details
“I notice there’s a new Cisco wireless AP.”
“So, cracked into that. Scanned, realized it was hooked up to a laptop.”
Higinio Ochoa USES Pastebin
Higinio says he used Pastebin or similar paste sites to distribute database dumps and police information.
Explicit Confidence 99% · W0Rmer EP 63 Details
“Pastebin or Ghostbin or one of the bins and then send it out”
Higinio Ochoa USES Exif metadata
Higinio used Exif/GPS metadata in photographs to determine where they had been taken, and accidentally published one photograph without removing that metadata.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he was able to look to see where these photos were taken”
“I already knew the GPS Exif data was in them”
William Basil ASSOCIATED_WITH Vodafone Greece wiretapping affair
Greek authorities reportedly issued an arrest warrant for Basil as a suspected CIA agent involved in the Vodafone wiretapping attack; his precise role remained unresolved.
Uncertain Confidence 90% · Jack Rhysider EP 64 Details
“the Greek government had issued an international arrest warrant for William Basil as a suspected CIA agent working out of the US embassy in Athens.”