DropBook exfiltrates data through Dropbox.
Explicit Confidence 97% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
DropBook exfiltrates data through Dropbox.
Explicit Confidence 97% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”
SharpStage USES sandbox evasion
SharpStage checks whether Arabic is installed and will not run without it, which Assaf describes as a way to avoid sandboxes.
Explicit Confidence 99% · Assaf Dahan EP 89 Details
“it’s also a clever way to avoid most sandboxes”
SharpStage USES Dropbox
SharpStage implements a Dropbox client to exfiltrate information.
Explicit Confidence 99% · Assaf Dahan EP 89 Details
“the exfiltration method is using a Dropbox client”
Cybereason USES endpoint detection and response
Cybereason operates in the endpoint detection and response space and deploys sensors on endpoints to detect and prevent malicious activity.
Explicit Confidence 99% · Lior Div EP 89 Details
“Today, Cybereason is operating in the EPP world; EDR, XDR, and NDR.”
“it started by deploying the sensor on every endpoint that the company has.”
DropBook uses fake Facebook accounts to receive commands through posts.
Explicit Confidence 99% · Assaf Dahan EP 89 Details
“They actually used a Facebook fake account”
“they actually implemented a C2 communication channel using Facebook fake accounts”
DropBook USES Data exfiltration
DropBook is described as exfiltrating victim data through Dropbox.
Derived Confidence 95% · Jack Rhysider EP 89 Details
“it exfiltrates that data through Dropbox.”
Cybereason USES behavioral detection
Cybereason's detection approach looks for malicious indicators of behavior rather than only known compromise indicators.
Explicit Confidence 98% · Assaf Dahan EP 89 Details
“we started looking for malicious indicators of behavior which are signs that a malicious actor is conducting their operation.”
“mostly behavior – is based on behavioral detection.”
Jenny Radcliffe ASSOCIATED_WITH Human Factor Security
The episode identifies Human Factor Security as Jenny's company.
Explicit Confidence 98% · Jenny Radcliffe EP 90 Details
“Her company is called Human Factor Security”
Jenny Radcliffe Twitter account ASSOCIATED_WITH Jenny Radcliffe
The episode identifies the Twitter account @Jenny_Radcliffe as Jenny's Twitter account.
Explicit Confidence 99% · Jenny Radcliffe EP 90 Details
“Her Twitter is @Jenny_Radcliffe.”
Human Factor Security website ASSOCIATED_WITH Human Factor Security
The episode identifies the Human Factor Security website as the website for Jenny's company.
Explicit Confidence 98% · Jenny Radcliffe EP 90 Details
“Her company is called Human Factor Security and their website is humanfactorsecurity.co.uk”
Jack Rhysider AUTHORED Darknet Diaries
Jack says that Darknet Diaries is created by him.
Explicit Confidence 99% · Jenny Radcliffe EP 90 Details
“This show is created by me, the nightingale, Jack Rhysider.”
Jenny Radcliffe AUTHORED The Human Factor
The episode says Jenny has her own podcast, The Human Factor.
Explicit Confidence 93% · Jenny Radcliffe EP 90 Details
“she has her own podcast called The Human Factor”
Darknet Diaries MENTIONS Social Engineering
The episode mentions that books titled Social Engineering were being written as the field became more legitimate.
Explicit Confidence 96% · Jenny Radcliffe EP 90 Details
“There were people writing books called Social Engineering.”
Jack Rhysider REFERENCES Sneakers
Jack says that Jenny's story reminds him of a line from the movie Sneakers.
Explicit Confidence 99% · Jack Rhysider EP 90 Details
“That kinda reminds me of this line from the movie Sneakers.”
Jenny Radcliffe SAME_AS People Hacker
Jenny Radcliffe says she is known online as the People Hacker, asserting that the two identities are the same.
Explicit Confidence 99% · Jenny Radcliffe EP 90 Details
“I’m known online as the People Hacker”
Jenny Radcliffe USES Tailgating
Jenny describes using an evacuation or diversion to get back into a building by tailgating, presenting this as a technique in her operations.
Derived Confidence 82% · Jenny Radcliffe EP 90 Details
“it’s when you go back in that you can go – you can tailgate, effectively”
Jenny Radcliffe USES Shoulder surfing
During the Mr. Big assessment, Jenny arranged for her confederate to watch and record the target entering his phone passcode.
Derived Confidence 95% · Jenny Radcliffe EP 90 Details
“my confederate was watching him open his phone and put in his pass code”
“recorded Mr. Big entering in his pass code”
Jenny Radcliffe USES social engineering
Jenny identifies herself as a social engineer and describes using social engineering in professional security work.
Explicit Confidence 99% · Jenny Radcliffe EP 90 Details
“I’m a social engineer and specialist in the psychology of security.”
“she’s done social engineering and physical infiltration, pen testing”
Jenny Radcliffe USES Rubber Ducky
Jack speculates that the payload on the USB drive was probably a rubber ducky; this is not confirmed in the episode.
Uncertain Confidence 55% · Jack Rhysider EP 90 Details
“I can guess that it was probably some kind of rubber ducky or something like that”
Jenny Radcliffe USES Pretexting
Jenny uses a pretext as part of a covert physical-access operation.
Explicit Confidence 99% · Jenny Radcliffe EP 90 Details
“My pretext was, I was going in to do some training on the inside of the bank.”
Jenny Radcliffe USES phishing
Jenny says that phishing is one of the methods used in her work, while contrasting it with other forms of social engineering.
Explicit Confidence 92% · Jenny Radcliffe EP 90 Details
“We can just phish people or whatever.”
Jenny Radcliffe USES Open-source intelligence
Jenny says that OSINT is normally her first step in a social-engineering job.
Explicit Confidence 99% · Jack Rhysider EP 90 Details
“When starting the job or any social engineering job, her first step is always to do OSINT”
“I go over to the internet and I look at Facebook”
Jenny Radcliffe USES physical penetration testing
Jenny performs physical infiltration and penetration testing as professional security work.
Explicit Confidence 99% · Jack Rhysider EP 90 Details
“For this episode, we hear from a social engineer and physical penetration tester.”
“she’s done social engineering and physical infiltration, pen testing”
Heartbleed AFFECTS OpenSSL
Heartbleed is described as an OpenSSL incident.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“Heartbleed, the SSL, the open SSL incident”
Mandiant ASSOCIATED_WITH FireEye
Mandiant was acquired by FireEye.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“Recently, they were acquired by FireEye.”