Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Bangladesh Bank heist INVOLVES RCBC Bank
The stolen funds were transferred to five accounts at RCBC Bank in the Philippines.
Explicit Confidence 99% · Jack Rhysider EP 72 Details
“The bank robbers successfully transferred 81 million dollars to their five RCBC bank accounts”
Bangladesh Bank heist INVOLVES Backdoor
One malware component created a backdoor into Bangladesh Bank.
Explicit Confidence 98% · Geoff White EP 72 Details
“one of them created the backdoor into Bangladesh Bank”
Bangladesh Bank heist INVOLVES transaction-record deletion malware
Malware installed on the affected machines deleted evidence of the fraudulent transactions.
Explicit Confidence 99% · Jack Rhysider EP 72 Details
“The malware that they had installed on the machines began deleting evidence of their crime.”
Bangladesh Bank heist INVOLVES Solaire Casino
Part of the stolen funds was sent to Solaire Casino for laundering.
Explicit Confidence 99% · Geoff White EP 72 Details
“I think it was thirty million in the Solaire and twenty million in the Midas.”
Bangladesh Bank heist INVOLVES encrypted channel
One malware component created an encrypted channel to conceal activity through the backdoor.
Explicit Confidence 98% · Geoff White EP 72 Details
“created the encrypted channel so that you could pull stuff out of that backdoor without being spotted”
Lazarus Group SAME_AS Reconnaissance General Bureau
The episode presents Lazarus Group and the Reconnaissance General Bureau as the same named group.
Explicit Confidence 97% · Jack Rhysider EP 72 Details
“the Lazarus Group which also is known as the Reconnaissance General Bureau or APT38”
Bangladesh Bank heist TARGETS Bangladesh Bank
The robbers selected Bangladesh Bank as the target for their billion-dollar cyber-heist.
Explicit Confidence 99% · Jack Rhysider EP 72 Details
“The Bangladesh Bank became the target.”
Lazarus Group TARGETS Far Eastern International Bank
The episode says Lazarus Group hit Taiwan's Far Eastern International Bank in October 2017.
Explicit Confidence 98% · Jack Rhysider EP 72 Details
“In October 2017, they hit the Taiwanese Far Eastern International Bank.”
Bangladesh Bank heist TARGETS New York Federal Reserve Bank
The attackers targeted Bangladesh Bank's foreign-currency reserve account held at the New York Federal Reserve Bank.
Explicit Confidence 98% · Geoff White EP 72 Details
“the Bangladesh Bank has a foreign currency reserve account in New York at the New York Fed”
Lazarus Group TARGETS Bank of Chile
The episode says Lazarus Group targeted the Bank of Chile in May 2018.
Explicit Confidence 98% · Jack Rhysider EP 72 Details
“and in May 2018, it was the Bank of Chile”
Lazarus Group TARGETS Bancomext
The episode says Lazarus Group targeted Mexico's Bancomext between January and May 2018.
Explicit Confidence 98% · Jack Rhysider EP 72 Details
“Between January and May of 2018, they targeted Mexico’s Bancomext”
Lazarus Group USES SWIFT
Lazarus Group was described as being tied to nearly all of the world's SWIFT attacks covered in the episode.
Attributed Confidence 92% · Jack Rhysider EP 72 Details
“Lazarus Group has been tied to almost all of the world’s SWIFT attacks to date”
WannaCry targeted Windows computers, particularly network-connected computers.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“this ransomware was targeting Windows computers and specifically, Windows computers that were connected to the network”
EternalBlue AFFECTS SMB
The exploit affected SMB, the Windows file-sharing protocol.
Explicit Confidence 98% · Jack Rhysider EP 73 Details
“the way Windows file sharing works, or SMB”
Lazarus Group ASSOCIATED_WITH Bureau 121
The episode says security-community observers call the North Korean hackers the Lazarus Group and that those hackers are believed to work from Bureau 121.
Uncertain Confidence 90% · Jack Rhysider EP 73 Details
“Bureau 121 is where we believe North Korean hackers are working from. People in the security community call the North Korean hackers The Lazarus Group”
Sony Pictures ATTRIBUTED_TO Lazarus Group
A European Union report is said to attribute the Sony attack to the Lazarus Group.
Attributed Confidence 93% · Jack Rhysider EP 73 Details
“the Lazarus Group is who carried out the attacks on Sony”
WannaCry ATTRIBUTED_TO Park Jin Hyok
The U.S. Department of Justice charged Park Jin Hyok in connection with a conspiracy that included creating the WannaCry ransomware.
Attributed Confidence 98% · Doj EP 73 Details
“creating the WannaCry ransomware”
WannaCry ATTRIBUTED_TO North Korea
The U.S. Department of Justice attributed the broader cyber-attack conspiracy, including WannaCry, to actors operating on behalf of the North Korean government.
Attributed Confidence 97% · Doj EP 73 Details
“a conspiracy that conducted sophisticated cyber-attacks around the world on behalf of the North Korean government”
WannaCry ATTRIBUTED_TO Lazarus Group
A European Union report is said to attribute WannaCry to the Lazarus Group.
Attributed Confidence 93% · Jack Rhysider EP 73 Details
“and conducted WannaCry”
Bangladesh Bank ATTRIBUTED_TO Lazarus Group
A European Union report is said to attribute the Bangladesh Bank heist to the Lazarus Group.
Attributed Confidence 93% · Jack Rhysider EP 73 Details
“did the Bangladesh Bank heist”
EternalBlue DEVELOPED_BY NSA
Jack states that EternalBlue was created by the NSA, though the episode presents this as part of a chain of events rather than independently documented evidence.
Explicit Confidence 86% · Jack Rhysider EP 73 Details
“Shadow Brokers wouldn’t have released EternalBlue if it wasn’t for the NSA creating it to begin with”
WannaCry DISCOVERED_BY Marcus Hutchins
Marcus Hutchins discovered the kill-switch URL and its behavior while analyzing WannaCry.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“when Marcus Hutchins found this URL in the code”
EternalBlue EXPLOITS SMB vulnerability
EternalBlue exploited a serious vulnerability in the way Windows file sharing through SMB works.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“It was a very serious vulnerability which exploited the way Windows file sharing works, or SMB”
The NotPetya incident involved the NotPetya malware.
Explicit Confidence 98% · Jack Rhysider EP 73 Details
“when NotPetya hit Ukraine”
WannaCry INVOLVES National Health Service
The incident hit hospitals in the UK's National Health Service.
Explicit Confidence 99% · Jack Rhysider EP 73 Details
“was hitting other hospitals in UK’s NHS, their National Health Service”