Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Team Flashback ASSOCIATED_WITH persistent backdoor

Radek said two of Team Flashback’s router exploits delivered persistent backdoors that survived a factory reset; this is reported as the team’s account.

Explicit Confidence 98% · Radek EP 82 Details

“two of our exploits were delivering a persistent back door. Once you exploit it, the user is not even aware of the exploit being planted”

Radek · offsets 56228–56365

Project Raven ASSOCIATED_WITH United Arab Emirates

Project Raven was described as a hacking group contracted by the UAE to hack its adversaries; the link is presented as a contractual association rather than direct operational control.

Explicit Confidence 97% · Jack Rhysider EP 82 Details

“This was basically a hacking group who was contracted by the UAE to hack into its adversaries.”

Jack Rhysider · offsets 20036–20130

Junghoon Lee ASSOCIATED_WITH Safari

Forbes reportedly described Junghoon Lee, also known as Lokihardt, as able to hack Safari.

Attributed Confidence 90% · Jack Rhysider EP 82 Details

“Google Chrome, or Safari.””

Jack Rhysider · offsets 22880–22906

Zero Day Initiative ASSOCIATED_WITH TippingPoint Intrusion Detection System

ZDI was created to enrich the vulnerabilities detectable by Trend Micro’s TippingPoint intrusion detection system.

Explicit Confidence 95% · Jack Rhysider EP 82 Details

“ZDI was created in order to enrich the vulnerabilities that their intrusion detection system can detect.”

Jack Rhysider · offsets 3365–3469

Amat Cama MEMBER_OF Fluoroacetate

Amat Cama is one of the two members of Team Fluoroacetate.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“It’s made up of two people, Richard Zhu and Amat Cama.”

Jack Rhysider · offsets 38470–38524

Richard Zhu MEMBER_OF Fluoroacetate

Richard Zhu is one of the two members of Team Fluoroacetate.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“It’s made up of two people, Richard Zhu and Amat Cama.”

Jack Rhysider · offsets 38470–38524

Radek MEMBER_OF Team Flashback

Radek and Pedro are known together as Team Flashback.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Together, they’re known as Team Flashback.”

Jack Rhysider · offsets 48411–48453

Pedro MEMBER_OF Team Flashback

Pedro and Radek are known together as Team Flashback.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Together, they’re known as Team Flashback.”

Jack Rhysider · offsets 48411–48453

Zero Day Initiative OPERATED_BY Trend Micro

ZDI is run by Trend Micro.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“ZDI is ran by Trend Micro”

Jack Rhysider · offsets 3011–3036

Fluoroacetate OTHER Tesla Model 3

Team Fluoroacetate exploited a Tesla Model 3’s browser session and won a Tesla Model 3 at Pwn2Own.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“they were able to exploit that session and take over the Tesla.”

Jack Rhysider · offsets 45867–45930

“That was enough for them to win a Tesla Model 3.”

Dustin Childs · offsets 45939–45987

Fluoroacetate OTHER baseband

Amat Cama’s specialty within Team Fluoroacetate was baseband exploitation.

Explicit Confidence 99% · Brian Gorenc EP 82 Details

“Amat’s specialty was actually – was baseband exploitation.”

Brian Gorenc · offsets 40176–40234

Vupen OTHER Google Chrome

Vupen demonstrated an exploit chain against Google Chrome at Pwn2Own in 2014.

Explicit Confidence 98% · Brian Gorenc EP 82 Details

“Vupen was – at the contest was targeting Google Chrome.”

Brian Gorenc · offsets 11387–11442

Team Flashback OTHER remote code execution

Team Flashback brought working zero-day exploits capable of remote code execution to Pwn2Own events.

Explicit Confidence 95% · Jack Rhysider EP 82 Details

“Together, Team Flashback has brought eleven working zero-day exploits to three different Pwn2Own events”

Jack Rhysider · offsets 57839–57942

Team Flashback OTHER Master of Pwn

Team Flashback won the Masters of Pwn in November 2020.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“In the November 2020 Pwn2Own, they won Masters of Pwn.”

Jack Rhysider · offsets 57987–58041

Fluoroacetate OTHER Samsung Galaxy

The Samsung Galaxy was exploited via baseband in Pwn2Own for three consecutive years from 2017 to 2019, in connection with Amat’s research.

Explicit Confidence 93% · Brian Gorenc EP 82 Details

“From 2017 to 2019, the Samsung Galaxy was part of the contest and it was actually exploited via baseband three years in a row.”

Brian Gorenc · offsets 41951–42077

Pwn2Own PART_OF CanSecWest

Pwn2Own has been held annually at CanSecWest since 2007.

Explicit Confidence 99% · Jack Rhysider EP 82 Details

“Since 2007, the Pwn2Own contest has been going on every year at CanSecWest.”

Jack Rhysider · offsets 9068–9143

Project Raven USES Karma

Project Raven operatives used the Karma exploit to access information on a target’s iPhone without requiring a click.

Explicit Confidence 98% · Jack Rhysider EP 82 Details

“One of the hacking tools they used is called Karma.”

Jack Rhysider · offsets 20132–20183

“This allowed Project Raven operatives to access information on a target’s iPhone without the target having to click or do anything.”

Jack Rhysider · offsets 20185–20316

National Security Agency ASSOCIATED_WITH NIST

Marcus says that NSA and NIST work hand-in-hand on security guidance for American businesses.

Explicit Confidence 98% · Marcus J. Carey EP 83 Details

“NSA and NIST, they work hand-in-hand to try to help all American businesses stay secure as well.”

Marcus J. Carey · offsets 16541–16637

Operation Eligible Receiver ASSOCIATED_WITH Jeff Man

Jeff says he was involved in Eligible Receiver without knowing it at the time, because a visitor to The Pit was gathering information for the exercise.

Uncertain Confidence 90% · Jeff Man EP 83 Details

“Yeah, so yes, I was involved. I didn’t know it at the time.”

Jeff Man · offsets 71008–71068

Marcus J. Carey ASSOCIATED_WITH National Security Agency

Marcus describes himself as a Navy intelligence asset tasked by the NSA and later working at Fort Meade on augmented staff.

Explicit Confidence 98% · Marcus J. Carey EP 83 Details

“my whole job in the military was you’re pretty much an attache or an asset for NSA”

Marcus J. Carey · offsets 7709–7791

“I was still in the Navy and sort of on loan to the NSA.”

Marcus J. Carey · offsets 15100–15162

Threatcare ASSOCIATED_WITH ReliaQuest

Threatcare was acquired by ReliaQuest, according to Jack.

Explicit Confidence 99% · Jack Rhysider EP 83 Details

“Threatcare was acquired by a larger company called ReliaQuest”

Jack Rhysider · offsets 28391–28452

Marcus J. Carey AUTHORED Tribe of Hackers Blue Team Edition

Marcus authored Tribe of Hackers Blue Team Edition.

Explicit Confidence 98% · Jack Rhysider EP 83 Details

“Blue Team Edition”

Jack Rhysider · offsets 28809–28826

Marcus J. Carey AUTHORED Tribe of Hackers Red Team Edition

Marcus authored Tribe of Hackers Red Team Edition.

Explicit Confidence 98% · Jack Rhysider EP 83 Details

“there’s Tribe of Hackers Red Team Edition”

Jack Rhysider · offsets 28766–28807

Marcus J. Carey AUTHORED Tribe of Hackers

Marcus authored the book Tribe of Hackers.

Explicit Confidence 99% · Jack Rhysider EP 83 Details

“he wrote a book and it’s called Tribe of Hackers.”

Jack Rhysider · offsets 28537–28586

Marcus J. Carey AUTHORED Tribe of Hackers Security Leaders

Marcus authored Tribe of Hackers Security Leaders.

Explicit Confidence 98% · Jack Rhysider EP 83 Details

“and Tribe of Hackers Security Leaders.”

Jack Rhysider · offsets 28828–28866