Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
Social Engineer LLC
DEVELOPED_BY
Christopher Hadnagy
Chris says that his company was started after the framework and related work, and that he later formed his own company focused on social engineering.
Explicit
Confidence 94%
· Christopher Hadnagy
EP 69
Details
“from there my company was started”
“formed my own company focused strictly on social engineering”
social-engineer.org
DEVELOPED_BY
Christopher Hadnagy
Chris says he set up and runs social-engineer.org as a resource for social engineers.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“I also run social-engineer.org which is a free resource for social engineers”
social engineering village
DEVELOPED_BY
Christopher Hadnagy
Jack says Chris started the social engineering village at DEF CON.
Explicit
Confidence 99%
· Jack Rhysider
EP 69
Details
“He’s the one who started the social engineering village at Defcon”
Social engineering framework
DEVELOPED_BY
Christopher Hadnagy
Chris says he wrote and formulated the social engineering framework used by the website.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“I started to write a framework on social engineering”
“it took about nine or ten months that formulated the social engineering framework”
Christopher Hadnagy
MEMBER_OF
Social Engineer LLC
Chris identifies himself as the CEO, or Chief Human Hacker, of Social Engineer LLC.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“I’m the CEO or my fun title is Chief Human Hacker of Social Engineer LLC”
Ryan
MEMBER_OF
Social Engineer LLC
Chris describes Ryan as his COO and says he had hired him for the penetration-testing work.
Explicit
Confidence 97%
· Christopher Hadnagy
EP 69
Details
“I had just hired Ryan. He’s my COO now”
Christopher Hadnagy
MEMBER_OF
OffSec
Chris says he received a job offer from OffSec to work as its operations manager.
Explicit
Confidence 98%
· Christopher Hadnagy
EP 69
Details
“got a job offer from OffSec to work with them as their ops manager”
Christopher Hadnagy
MEMBER_OF
The Innocent Lives Foundation
Chris says he runs The Innocent Lives Foundation, a nonprofit.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“Then I also run a nonprofit called The Innocent Lives Foundation”
social engineering village
PART_OF
DEF CON
The social engineering village is described as a village at DEF CON.
Explicit
Confidence 98%
· Jack Rhysider
EP 69
Details
“the social engineering village at Defcon”
Christopher Hadnagy
USES
Vishing
Chris uses voice phishing in a test by impersonating technical support and calling an employee.
Explicit
Confidence 99%
· Jack Rhysider
EP 69
Details
“Chris changed into Paul and acted like he’s from tech support”
“This is Paul from tech support. How you doing?”
Meterpreter
USES
reverse shell
The supposed PC cleaner was actually a Meterpreter reverse shell that provided remote access to the employee's machine.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“it was a meterpreter reverse-shell that gave us access into their machine”
Christopher Hadnagy
USES
phishing
Chris uses phishing campaigns as part of client security-awareness and penetration testing.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“In this particular test, we started off with a phishing e-mail”
“our goal is to steal credentials, to install an implant”
Christopher Hadnagy
USES
OSINT
Chris and Ryan used open-source intelligence to learn that the Jamaican bank was undergoing an audit and to prepare their pretext.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“We had done a lot of OSINT and we found that the bank was undergoing an audit”
Metasploit
USES
reverse shell
Jack says a reverse shell can be set up with Metasploit in the described remote-access scenario.
Explicit
Confidence 98%
· Jack Rhysider
EP 69
Details
“This is easily set up, too, with a tool called Metasploit. This is just a reverse-shell”
Christopher Hadnagy
USES
Pretexting
Chris and Ryan impersonated PCI auditors as a pretext for entering the bank.
Explicit
Confidence 99%
· Christopher Hadnagy
EP 69
Details
“We were gonna pretend to be PCI auditors to try to get access to the building”
“They plan out their pretext or ruse”
Mspkr
USES
VPN
During the recorded vishing call, Mspkr says they are on the VPN while using their work machine.
Explicit
Confidence 98%
· Christopher Hadnagy
EP 69
Details
“are you on the VPN right now? You’re on your work machine?”
“Yes.”
Social Engineer LLC
USES
phishing
The company conducts security-awareness and penetration-test phishing campaigns for clients.
Explicit
Confidence 98%
· Christopher Hadnagy
EP 69
Details
“we’re full-board doing SE testing and phishing and all this other work”
“our end goal with that kind of phishing is to teach them how to catch it”
The Innocent Lives Foundation
USES
OSINT
Jack says people at the foundation use OSINT and hacking skills to help authorities identify child predators or human traffickers.
Explicit
Confidence 98%
· Jack Rhysider
EP 69
Details
“people use OSINT and hacking skills to try to help authorities find and capture child predators or human traffickers”
Ghost Exodus
COMPROMISES
HVAC server
Ghost Exodus gained access to the clinic's HVAC server and established a persistent remote connection to it.
Explicit
Confidence 98%
· Jack Rhysider
EP 70
Details
“With that, he was able to establish a persistent remote connection to this HVAC server.”
Electronik Tribulation Army
DEVELOPED_BY
Ghost Exodus
Ghost Exodus says he started his own hacking group, which became the Electronik Tribulation Army.
Derived
Confidence 94%
· Jack Rhysider
EP 70
Details
“he was able to start his own hacking group, and he named it ETA.”
McGrew Security
DEVELOPED_BY
Wesley McGrew
Wesley identifies McGrew Security as his information-security blog.
Explicit
Confidence 96%
· Wesley McGrew
EP 70
Details
“Called mcgrewsecurity.com.”
Ghost Exodus
DISCOVERED_BY
Wesley McGrew
Wesley investigated the screenshots, identified the clinic, and collected information linking the activity to Ghost Exodus.
Explicit
Direction flagged
Confidence 98%
· Jack Rhysider
EP 70
Details
“I wanted to find out as much about Ghost Exodus as I could.”
“we contacted the Jackson, Mississippi FBI and handed that information over.”
OpIran
INVOLVES
Rxbot
Ghost Exodus says the bots later identified as Rxbot were used in OpIran.
Derived
Confidence 90%
· Jack Rhysider
EP 70
Details
“I used these bots in OpIran”
OpIran
INVOLVES
Neda Agha-Soltan
Ghost Exodus says he used his bots in OpIran in response to Neda Agha-Soltan's death.
Explicit
Confidence 99%
· Jack Rhysider
EP 70
Details
“I used these bots in OpIran and in response to the death of Neda Agha-Soltan”
Fixer
MEMBER_OF
Electronik Tribulation Army
Wesley describes Fixer as one of the members of McGraw's hacker group, the Electronik Tribulation Army.
Explicit
Confidence 96%
· Wesley McGrew
EP 70
Details
“other members of McGraw’s hacker group, the Electronik Tribulation Army”
“he went by the handle Fixer”