Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
Nation State Actor USES Implant
The operator installs an implant on the compromised web server and later on an administrator's machine to maintain remote access.
Explicit Confidence 99% · Nsa EP 10 Details
“Once I did that, I put an implant down on that machine”
“we put the implant on his machine”
The malware was observed running on and being updated across endpoints in the client environment.
Derived Confidence 89% · Andrew EP 11 Details
“making sure that their malware is still running and deploying newer versions”
“on these end-points”
Advanced Persistent Threat ASSOCIATED_WITH state-sponsored group
Andrew says he was told that the APT group was state-sponsored, while expressing uncertainty about the attribution and location.
Uncertain Confidence 88% · Andrew EP 11 Details
“So I’ve been told, it’s state-sponsored. It’s in the east, I guess.”
malware ATTRIBUTED_TO state-sponsored group
The malware found in the network matched malware described in a published report that linked it to the APT group.
Attributed Confidence 93% · Jack Rhysider EP 11 Details
“the malware found in the network matched exactly the same malware that someone had published in a report which linked it back to that APT group”
Darknet Diaries REFERENCES darknetdiaries.com
The podcast directs listeners to darknetdiaries.com for show notes and links.
Explicit Confidence 99% · Jack Rhysider EP 11 Details
“For show notes and links, check out darknetdiaries.com.”
Andrew USES remediation
Andrew is scheduled to perform remediation to remove the threat from the client environment.
Explicit Confidence 91% · Andrew EP 11 Details
“I was sitting in the airport waiting to fly out”
“He’s scheduled to do the remediation in just two days.”
threat actor USES back door
The investigators sought to identify the back doors the threat actor had into the environment.
Explicit Confidence 94% · Andrew EP 11 Details
“try and identify how many back doors these people have into their environment”
Andrew USES digital forensics
Andrew participates in digital-forensics work during the engagement.
Explicit Confidence 99% · Andrew EP 11 Details
“I came in as part of the team that was doing some of the forensics work”
Andrew USES incident response
Andrew works on a team that performs incident response and participates in incident-response engagements.
Explicit Confidence 97% · Jack Rhysider EP 11 Details
“Andrew works on a team that does incident response.”
“We spun it up to – the company that I work for spun it up to a follow incident response engagement.”
threat actor USES lateral movement
The threat actor was observed moving laterally within the client environment during the monitoring and discovery phases.
Explicit Confidence 99% · Andrew EP 11 Details
“We could see lateral movement”
threat actor USES exfiltration
The threat actor targeted R&D systems and exfiltrated intellectual property.
Explicit Confidence 99% · Andrew EP 11 Details
“They were looking to exfiltrate and they did exfiltrate some intellectual property.”
Deep Crack AFFECTS DES
Deep Crack could crack a DES message in 56 hours.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“could crack a DES message in just 56 hours”
DES Cracker AFFECTS DES
The DES Cracker was a hardware tool capable of breaking DES.
Explicit Confidence 99% · Cindy Cohn EP 12 Details
“It was a hardware tool that basically, very cheaply, could break DES.”
Signal ASSOCIATED_WITH cryptography
Signal is presented as a protocol used for end-to-end encrypted messaging.
Explicit Confidence 95% · Jack Rhysider EP 12 Details
“Facebook uses a protocol called Signal to do end-to-end encryption”
HTTPS Everywhere DEVELOPED_BY Electronic Frontier Foundation
Jack says the EFF creates tools such as HTTPS Everywhere.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“The EFF creates tools like HTTPS everywhere”
PGP DEVELOPED_BY Phil Zimmermann
Jack says Phil Zimmermann developed PGP as a more secure way of communicating.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“Phil Zimmermann, a software engineer, developed a much more secure way of communicating called PGP”
DES Cracker DEVELOPED_BY Electronic Frontier Foundation
The EFF created the DES Cracker to demonstrate that DES was not sufficiently secure.
Explicit Confidence 99% · Cindy Cohn EP 12 Details
“EFF created a tool called the DES Cracker.”
Clipper Chip DISCOVERED_BY Matt Blaze
Matt Blaze demonstrated that the Clipper Chips were insecure and exposed flaws in their design.
Explicit Confidence 99% · Cindy Cohn EP 12 Details
“Matt Blaze, who’s now a professor at the University of Pennsylvania of Computer Science, a very famous computer science professor demonstrated that these Clipper Chips were really insecure”
Bernstein v. Department of Justice INVOLVES Electronic Frontier Foundation
The EFF handled the Bernstein v. Department of Justice lawsuit.
Explicit Confidence 99% · Cindy Cohn EP 12 Details
“We handled one called Bernstein vs. Department of Justice.”
Bernstein v. Department of Justice INVOLVES Cindy Cohn
Cindy Cohn personally helped Dan Bernstein in the case.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“he got help from the EFF; specifically, Cindy Cohn herself.”
Bernstein v. Department of Justice INVOLVES US Department of Justice
Bernstein brought the legal challenge against the US Department of Justice.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“Bernstein decided to do battle against the [00:15:00] US Department of Justice”
Bernstein v. Department of Justice INVOLVES Dan Bernstein
The Bernstein case involved Dan Bernstein, who wanted to publish his cryptographic ideas and source code.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“Dan Bernstein was developing encryption methods that were above the regulated limit.”
Bernstein v. Department of Justice INVOLVES cryptography
The case concerned publishing cryptographic code and ideas.
Explicit Confidence 96% · Cindy Cohn EP 12 Details
“We wanted people to be able to publish and share strong encryption on the internet”
Cindy Cohn MEMBER_OF Electronic Frontier Foundation
Cindy Cohn identifies herself as the Executive Director of the Electronic Frontier Foundation.
Explicit Confidence 99% · Cindy Cohn EP 12 Details
“I’m the Executive Director of the Electronic Frontier Foundation.”
triple DES RELATED_TO DES
Triple DES is described as a stronger version of DES.
Explicit Confidence 99% · Jack Rhysider EP 12 Details
“They also allowed triple DES which was a stronger version of DES.”