Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Dark Basin SAME_AS Mercenary.Amanda
The episode presents Mercenary.Amanda as another name used by NortonLifeLock for the group Citizen Lab called Dark Basin.
Explicit Confidence 94% · Jack Rhysider EP 79 Details
“they were also tracking Dark Basin, but they called this group Mercenary.Amanda”
Aviram Azari USES Hack-for-hire
Aviram Azari was indicted and arrested for allegedly engaging in a hack-for-hire scheme and conspiring with others to hack computers.
Attributed Confidence 96% · Jack Rhysider EP 79 Details
“Aviram Azari has been indicted and arrested for engaging in a hack-for-hire scheme.”
Dark Basin USES URL shortener
Dark Basin used URL shorteners created with open-source software to conceal phishing destinations.
Explicit Confidence 98% · Adam Hulcoop EP 79 Details
“we found some suspicious links that were shortened using a URL shortener”
Dark Basin USES phishing
Dark Basin sent phishing links to victims in crafted emails.
Explicit Confidence 99% · Jack Rhysider EP 79 Details
“E-mails were sent to victims with phishing links in them”
Citizen Lab USES Open-source intelligence
Citizen Lab’s investigation relied on open-source intelligence and publicly available data.
Explicit Confidence 99% · Jack Rhysider EP 79 Details
“their work is rooted in open-source intelligence, or OSINT”
Sumit Gupta USES Hack-for-hire
Sumit Gupta was identified as a hacker in the Visalus-related scheme in which private investigators hired hackers to access Ocean Avenue’s computers.
Explicit Confidence 97% · Jack Rhysider EP 79 Details
“One of the hackers was Sumit Gupta.”
BellTroX InfoTech Services USES phishing
BellTroX employees publicly displayed phishing pages and the company was described as offering email hacking and penetration services.
Explicit Confidence 97% · John Scott-Railton EP 79 Details
“Look at these swank-looking phishing pages that I’ve generated.”
Dark Basin USES Credential phishing
The phishing sites used by Dark Basin requested victims’ login credentials, including email passwords.
Explicit Confidence 99% · Adam Hulcoop EP 79 Details
“the phishing site you land on knows who is coming and they can pre-load that text and pre-load that screen to make it look like – you’ve already been signed into your Gmail; just re-enter your password for us.”
Dodd-Frank Wall Street Reform and Consumer Protection Act ASSOCIATED_WITH Securities and Exchange Commission
The Dodd-Frank Act was described as establishing or supporting corporate whistleblower bounty provisions administered through SEC enforcement cases.
Explicit Confidence 90% · Jack Rhysider EP 80 Details
“this new law said whenever a whistleblower comes forward to provide good information in a case that results in a fine of over a million dollars”
2008 financial crisis LEADS_TO Dodd-Frank Wall Street Reform and Consumer Protection Act
Jack said the Dodd-Frank Act was passed a little over a year after the 2008 financial crisis.
Explicit Confidence 98% · Jack Rhysider EP 80 Details
“This was just a little over a year after the 2008 financial crisis”
Paint Parrot MEMBER_OF British Army
Paint Parrot said he served in the British Army.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“I was in a part of the British Army”
Paint Parrot MEMBER_OF Royal Artillery
Paint Parrot said he was in the British Army's Royal Artillery.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“I was in a part of the British Army called the Royal Artillery”
Royal Artillery PART_OF British Army
The Royal Artillery was described as a part of the British Army.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“a part of the British Army called the Royal Artillery”
UAV unit PART_OF Royal Artillery
The UAV unit was described as a unit within the Royal Artillery.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“We were a drone unit within the Royal Artillery”
The UAV unit gathered intelligence for operations against the Taliban.
Explicit Confidence 96% · Paint Parrot EP 80 Details
“go out and do operations against, I don’t know, like the Taliban”
Paint Parrot USES Surveillance
After leaving corporate intelligence, Paint Parrot was described as focusing on surveillance work.
Explicit Confidence 98% · Jack Rhysider EP 80 Details
“start his own company which does surveillance work”
Paint Parrot USES penetration testing
Paint Parrot was described as focusing on penetration testing after leaving the corporate intelligence work.
Explicit Confidence 98% · Jack Rhysider EP 80 Details
“he mostly focuses on penetration testing, social engineering, and red teaming”
Paint Parrot USES Pay-as-you-go SIM card
Paint Parrot used UK pay-as-you-go SIM cards in secondhand phones for different jobs and identities.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“We’d get a load of – in the UK – pay-as-you-go SIM cards and secondhand phones”
Paint Parrot USES Instagram
Paint Parrot used Instagram as a source of open-source intelligence about the target and the target's family.
Explicit Confidence 98% · Paint Parrot EP 80 Details
“looking at Facebook, Instagram”
Paint Parrot USES social engineering
Paint Parrot described his work as involving social engineering to persuade or deceive people into revealing information or granting access.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“You learn a lot of social engineering ‘cause you’re constantly having to talk your way into places you shouldn’t be”
Paint Parrot USES Facebook
Paint Parrot used Facebook to gather publicly available information about a target and the target's family.
Explicit Confidence 98% · Paint Parrot EP 80 Details
“use Facebook so we can get pictures of his family first and last names, locations”
Paint Parrot USES Pretexting
Paint Parrot created a false identity, backstory, LinkedIn profile, and business cards as a pretext for approaching the target.
Explicit Confidence 99% · Jack Rhysider EP 80 Details
“Paint Parrot needs to come up with a pretext, a backstory as to who he is”
Paint Parrot USES MySpace
Paint Parrot used the target's old MySpace account as part of his intelligence gathering.
Explicit Confidence 98% · Paint Parrot EP 80 Details
“Found he’s still got an old MySpace”
Paint Parrot USES LinkedIn
Paint Parrot and his team used LinkedIn to identify employees of the target company who might have relevant knowledge.
Explicit Confidence 93% · Jack Rhysider EP 80 Details
“you can go on LinkedIn, search for a company, and see thousands of employees that work for that company”
Paint Parrot USES Burner phone
Paint Parrot used burner phones as part of his operational identities and later handed a burner phone to the recruited whistleblower.
Explicit Confidence 99% · Paint Parrot EP 80 Details
“The next thing I notice, I met up with him after that to give him a burner phone”