Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
Saudi Arabia
USES
Pegasus
Jack says NSO sold Pegasus to the Saudi government, while the episode also presents uncertainty about its use against Khashoggi and his associates.
Explicit
Confidence 96%
· Jack Rhysider
EP 100
Details
“NSO has also sold their spyware to the government of Saudi Arabia”
Jack Rhysider ·
offsets 35509–35574
Mexico
USES
Pegasus
The episode says the Mexican government purchased Pegasus and that Mexican government or affiliated operators controlled it.
Explicit
Confidence 98%
· Jack Rhysider
EP 100
Details
“NSO sold the tool to the Mexican government and from there, it’s now someone within the Mexican government or affiliated organization who has control of it”
Jack Rhysider ·
offsets 28182–28337
Pegasus
USES
zero-day exploit chain
Pegasus used a chain of previously unknown exploits against mobile devices.
Explicit
Confidence 98%
· John Scott-Railton
EP 100
Details
“it’s using this chain of zero-days”
John Scott-Railton ·
offsets 9976–10010
Pegasus
USES
remote jailbreak
The Pegasus infection remotely jailbroke the test iPhone.
Explicit
Confidence 99%
· John Scott-Railton
EP 100
Details
“we had just observed a remote jailbreak on this iPhone”
John Scott-Railton ·
offsets 9112–9166
Pegasus
USES
zero-click exploit
The episode says NSO sold a zero-click WhatsApp exploit to customers as a way to deploy Pegasus without requiring the victim to click.
Explicit
Confidence 96%
· Jack Rhysider
EP 100
Details
“NSO was in fact selling this exploit to its customers”
Jack Rhysider ·
offsets 47320–47373
FBI
USES
Magic Lantern
According to information obtained through a Freedom of Information request, the FBI used Magic Lantern to capture keystrokes on target computers.
Attributed
Confidence 97%
· Jack Rhysider
EP 100
Details
“the FBI uses this Magic Lantern malware to capture keystrokes on target computers”
Jack Rhysider ·
offsets 1274–1355
Windows 98 accessibility-feature login bypass
AFFECTS
Windows 98
The login-bypass exploit was used against a computer running Windows 98.
Explicit
Confidence 99%
· Jack Rhysider
EP 101
Details
“puts it in the computer running Windows 98”
Jack Rhysider ·
offsets 41308–41350
Windows 98 accessibility feature vulnerability
AFFECTS
Windows 98
The accessibility-feature vulnerability is presented as affecting the Windows 98 system Os encountered.
Explicit
Confidence 94%
· Os
EP 101
Details
“what do you have for 1998 Windows systems?”
“a log-in screen for Windows 98”
Puerto Rico lottery fraud
DISCOVERED_BY
Os
Os and his team uncovered the database manipulation and traced it to an insider.
Explicit
Confidence 99%
· Jack Rhysider
EP 101
Details
“Os has cracked the case”
Jack Rhysider ·
offsets 55044–55067
“He’s figured out how the millions of dollars are being stolen from the lottery”
Jack Rhysider ·
offsets 55070–55148
Windows 98 accessibility-feature login bypass
EXPLOITS
Windows 98 accessibility feature vulnerability
The Windows 98 accessibility-feature login-bypass exploit exploits the accessibility-feature vulnerability described in the episode.
Derived
Confidence 90%
· Os
EP 101
Details
“The accessibility feature – I can’t remember what the actual vulnerability was, but basically ended up being able to create an exploit”
Puerto Rico lottery fraud
INVOLVES
Puerto Rico lottery
The incident concerned millions of dollars being stolen through the Puerto Rico lottery and manipulation of its payout system.
Explicit
Confidence 99%
· Os
EP 101
Details
“we are losing millions and millions of dollars a month through the lottery of Puerto Rico”
“Someone inside the lottery IT team was going into the database and changing one number”
Jack Rhysider ·
offsets 51592–51678
Puerto Rico lottery fraud
INVOLVES
Government of Puerto Rico
The investigation was commissioned and authorized by the Government of Puerto Rico, including the governor and government systems.
Explicit
Confidence 98%
· Jack Rhysider
EP 101
Details
“The government of Puerto Rico hired this consulting agency to come do some work”
Jack Rhysider ·
offsets 11700–11779
“The governor of Puerto Rico looks at me and the team”
Puerto Rico lottery fraud
INVOLVES
United States Marine Corps
The incident account involves Os’s prior Marine Corps cybersecurity experience, which he drew on while investigating the lottery network.
Derived
Confidence 78%
· Jack Rhysider
EP 101
Details
“Os has done a number of penetration tests before he did offensive work while in the Marines”
Jack Rhysider ·
offsets 28893–28984
Puerto Rico lottery fraud
INVOLVES
Federal Bureau of Investigation
The FBI investigated the lottery fraud, received Os’s evidence, and took over most of the investigation.
Explicit
Confidence 99%
· Os
EP 101
Details
“I immediately have to contact the bureau, the FBI field office in Puerto Rico”
“The bureau took over most of the investigation”
Puerto Rico lottery fraud
INVOLVES
cartel
The lottery fraud was linked to a cartel operation involving money laundering through winning lottery tickets, according to the episode’s account of the investigation and court records.
Attributed
Confidence 96%
· Os
EP 101
Details
“they were also running guns and drugs through that process”
“the court records show that they had someone inside the lottery who would produce winning lottery tickets”
Jack Rhysider ·
offsets 64273–64378
Os
MEMBER_OF
United States Marine Corps
Os joined the Marine Corps specifically to pursue computer and cybersecurity work and served five years active duty.
Explicit
Confidence 99%
· Os
EP 101
Details
“I chose the Marine Corps specifically”
“I spent five years active duty”
Puerto Rico lottery
OPERATED_BY
Department of Treasury
The episode states that the Puerto Rico lottery is run by the Department of Treasury.
Explicit
Confidence 99%
· Jack Rhysider
EP 101
Details
“It’s been running since 1934 and is ran by the Department of Treasury”
Jack Rhysider ·
offsets 14624–14693
Jack Rhysider
REFERENCES
Full Metal Jacket
Jack references Full Metal Jacket and discusses a specific boot-camp scene from the film as an analogy for Marine Corps training.
Explicit
Confidence 99%
· Jack Rhysider
EP 101
Details
“it reminds me of a very specific scene in the movie Full Metal Jacket”
Jack Rhysider ·
offsets 7544–7613
cartel
USES
BlackBerry phones
The indictment reportedly claimed that people in the cartel operation used BlackBerry phones to communicate.
Attributed
Confidence 94%
· Jack Rhysider
EP 101
Details
“they used BlackBerry phones to communicate”
Jack Rhysider ·
offsets 65500–65545
Os
USES
digital forensics
Os performed defensive and forensic cybersecurity work in the Marine Corps and later at a consulting firm.
Explicit
Confidence 95%
· Os
EP 101
Details
“So, I did both”
“They were doing forensics and other cyber-security kinda stuff”
Os
USES
network enumeration
Os enumerated the internal network to map reachable systems and identify the lottery network structure.
Explicit
Confidence 99%
· Os
EP 101
Details
“So, I actually enumerate the network”
Os
USES
Nmap
Os included Nmap in his portable tool suite and used scans to examine the lottery network.
Explicit
Confidence 98%
· Os
EP 101
Details
“a bunch of tools on it like Nmap and freaking man-in-the-middle tools”
“Nmap scans are also common”
Jack Rhysider ·
offsets 44812–44838
Os
USES
warez scene
Os says that in the early days he participated in the warez scene as an administrator, rooter, and cracker producing zero-day releases.
Explicit
Confidence 99%
· Os
EP 101
Details
“I used to run around in the warez scene as a wares administrator and a rooter”
Os
USES
Password hash cracking
Os attempted to crack password hashes obtained from the compromised Windows computer.
Explicit
Confidence 99%
· Jack Rhysider
EP 101
Details
“he grabs this hash file to try to crack the passwords on this computer”
Jack Rhysider ·
offsets 42804–42874
Os
USES
penetration testing
Os conducted penetration tests as part of his offensive cybersecurity work and consulting work.
Explicit
Confidence 98%
· Jack Rhysider
EP 101
Details
“he’s a pen tester”
Jack Rhysider ·
offsets 33000–33020
“Os has done a number of penetration tests before he did offensive work while in the Marines”
Jack Rhysider ·
offsets 28893–28984