Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Social Engineer LLC DEVELOPED_BY Christopher Hadnagy

Chris says that his company was started after the framework and related work, and that he later formed his own company focused on social engineering.

Explicit Confidence 94% · Christopher Hadnagy EP 69 Details

“from there my company was started”

Christopher Hadnagy · offsets 4401–4434

“formed my own company focused strictly on social engineering”

Christopher Hadnagy · offsets 6616–6676

social-engineer.org DEVELOPED_BY Christopher Hadnagy

Chris says he set up and runs social-engineer.org as a resource for social engineers.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“I also run social-engineer.org which is a free resource for social engineers”

Christopher Hadnagy · offsets 2990–3066

social engineering village DEVELOPED_BY Christopher Hadnagy

Jack says Chris started the social engineering village at DEF CON.

Explicit Confidence 99% · Jack Rhysider EP 69 Details

“He’s the one who started the social engineering village at Defcon”

Jack Rhysider · offsets 61965–62030

Social engineering framework DEVELOPED_BY Christopher Hadnagy

Chris says he wrote and formulated the social engineering framework used by the website.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“I started to write a framework on social engineering”

Christopher Hadnagy · offsets 4160–4212

“it took about nine or ten months that formulated the social engineering framework”

Christopher Hadnagy · offsets 5480–5561

Christopher Hadnagy MEMBER_OF Social Engineer LLC

Chris identifies himself as the CEO, or Chief Human Hacker, of Social Engineer LLC.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“I’m the CEO or my fun title is Chief Human Hacker of Social Engineer LLC”

Christopher Hadnagy · offsets 2911–2983

Ryan MEMBER_OF Social Engineer LLC

Chris describes Ryan as his COO and says he had hired him for the penetration-testing work.

Explicit Confidence 97% · Christopher Hadnagy EP 69 Details

“I had just hired Ryan. He’s my COO now”

Christopher Hadnagy · offsets 15541–15580

Christopher Hadnagy MEMBER_OF OffSec

Chris says he received a job offer from OffSec to work as its operations manager.

Explicit Confidence 98% · Christopher Hadnagy EP 69 Details

“got a job offer from OffSec to work with them as their ops manager”

Christopher Hadnagy · offsets 3886–3952

Christopher Hadnagy MEMBER_OF The Innocent Lives Foundation

Chris says he runs The Innocent Lives Foundation, a nonprofit.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“Then I also run a nonprofit called The Innocent Lives Foundation”

Christopher Hadnagy · offsets 3199–3263

social engineering village PART_OF DEF CON

The social engineering village is described as a village at DEF CON.

Explicit Confidence 98% · Jack Rhysider EP 69 Details

“the social engineering village at Defcon”

Jack Rhysider · offsets 61990–62030

Christopher Hadnagy USES Vishing

Chris uses voice phishing in a test by impersonating technical support and calling an employee.

Explicit Confidence 99% · Jack Rhysider EP 69 Details

“Chris changed into Paul and acted like he’s from tech support”

Jack Rhysider · offsets 52781–52842

“This is Paul from tech support. How you doing?”

Christopher Hadnagy · offsets 53126–53173

Meterpreter USES reverse shell

The supposed PC cleaner was actually a Meterpreter reverse shell that provided remote access to the employee's machine.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“it was a meterpreter reverse-shell that gave us access into their machine”

Christopher Hadnagy · offsets 52438–52511

Christopher Hadnagy USES phishing

Chris uses phishing campaigns as part of client security-awareness and penetration testing.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“In this particular test, we started off with a phishing e-mail”

Christopher Hadnagy · offsets 50670–50732

“our goal is to steal credentials, to install an implant”

Christopher Hadnagy · offsets 7550–7605

Christopher Hadnagy USES OSINT

Chris and Ryan used open-source intelligence to learn that the Jamaican bank was undergoing an audit and to prepare their pretext.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“We had done a lot of OSINT and we found that the bank was undergoing an audit”

Christopher Hadnagy · offsets 17286–17363

Metasploit USES reverse shell

Jack says a reverse shell can be set up with Metasploit in the described remote-access scenario.

Explicit Confidence 98% · Jack Rhysider EP 69 Details

“This is easily set up, too, with a tool called Metasploit. This is just a reverse-shell”

Jack Rhysider · offsets 57235–57323

Christopher Hadnagy USES Pretexting

Chris and Ryan impersonated PCI auditors as a pretext for entering the bank.

Explicit Confidence 99% · Christopher Hadnagy EP 69 Details

“We were gonna pretend to be PCI auditors to try to get access to the building”

Christopher Hadnagy · offsets 21800–21878

“They plan out their pretext or ruse”

Jack Rhysider · offsets 41759–41794

Mspkr USES VPN

During the recorded vishing call, Mspkr says they are on the VPN while using their work machine.

Explicit Confidence 98% · Christopher Hadnagy EP 69 Details

“are you on the VPN right now? You’re on your work machine?”

Christopher Hadnagy · offsets 53751–53810

“Yes.”

Mspkr · offsets 53818–53822

Social Engineer LLC USES phishing

The company conducts security-awareness and penetration-test phishing campaigns for clients.

Explicit Confidence 98% · Christopher Hadnagy EP 69 Details

“we’re full-board doing SE testing and phishing and all this other work”

Christopher Hadnagy · offsets 10400–10462

“our end goal with that kind of phishing is to teach them how to catch it”

Christopher Hadnagy · offsets 7371–7443

The Innocent Lives Foundation USES OSINT

Jack says people at the foundation use OSINT and hacking skills to help authorities identify child predators or human traffickers.

Explicit Confidence 98% · Jack Rhysider EP 69 Details

“people use OSINT and hacking skills to try to help authorities find and capture child predators or human traffickers”

Jack Rhysider · offsets 62429–62545

Ghost Exodus COMPROMISES HVAC server

Ghost Exodus gained access to the clinic's HVAC server and established a persistent remote connection to it.

Explicit Confidence 98% · Jack Rhysider EP 70 Details

“With that, he was able to establish a persistent remote connection to this HVAC server.”

Jack Rhysider · offsets 15386–15473

Electronik Tribulation Army DEVELOPED_BY Ghost Exodus

Ghost Exodus says he started his own hacking group, which became the Electronik Tribulation Army.

Derived Confidence 94% · Jack Rhysider EP 70 Details

“he was able to start his own hacking group, and he named it ETA.”

Jack Rhysider · offsets 8276–8340

McGrew Security DEVELOPED_BY Wesley McGrew

Wesley identifies McGrew Security as his information-security blog.

Explicit Confidence 96% · Wesley McGrew EP 70 Details

“Called mcgrewsecurity.com.”

Wesley McGrew · offsets 24732–24758

Ghost Exodus DISCOVERED_BY Wesley McGrew

Wesley investigated the screenshots, identified the clinic, and collected information linking the activity to Ghost Exodus.

Explicit Direction flagged Confidence 98% · Jack Rhysider EP 70 Details

“I wanted to find out as much about Ghost Exodus as I could.”

Jack Rhysider · offsets 33500–33558

“we contacted the Jackson, Mississippi FBI and handed that information over.”

Wesley McGrew · offsets 28874–28949

OpIran INVOLVES Rxbot

Ghost Exodus says the bots later identified as Rxbot were used in OpIran.

Derived Confidence 90% · Jack Rhysider EP 70 Details

“I used these bots in OpIran”

Jack Rhysider · offsets 22288–22315

OpIran INVOLVES Neda Agha-Soltan

Ghost Exodus says he used his bots in OpIran in response to Neda Agha-Soltan's death.

Explicit Confidence 99% · Jack Rhysider EP 70 Details

“I used these bots in OpIran and in response to the death of Neda Agha-Soltan”

Jack Rhysider · offsets 22288–22364

Fixer MEMBER_OF Electronik Tribulation Army

Wesley describes Fixer as one of the members of McGraw's hacker group, the Electronik Tribulation Army.

Explicit Confidence 96% · Wesley McGrew EP 70 Details

“other members of McGraw’s hacker group, the Electronik Tribulation Army”

Wesley McGrew · offsets 35191–35262

“he went by the handle Fixer”

Wesley McGrew · offsets 35368–35395