Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Saudi Arabia USES Pegasus

Jack says NSO sold Pegasus to the Saudi government, while the episode also presents uncertainty about its use against Khashoggi and his associates.

Explicit Confidence 96% · Jack Rhysider EP 100 Details

“NSO has also sold their spyware to the government of Saudi Arabia”

Jack Rhysider · offsets 35509–35574

Mexico USES Pegasus

The episode says the Mexican government purchased Pegasus and that Mexican government or affiliated operators controlled it.

Explicit Confidence 98% · Jack Rhysider EP 100 Details

“NSO sold the tool to the Mexican government and from there, it’s now someone within the Mexican government or affiliated organization who has control of it”

Jack Rhysider · offsets 28182–28337

Pegasus USES zero-day exploit chain

Pegasus used a chain of previously unknown exploits against mobile devices.

Explicit Confidence 98% · John Scott-Railton EP 100 Details

“it’s using this chain of zero-days”

John Scott-Railton · offsets 9976–10010

Pegasus USES remote jailbreak

The Pegasus infection remotely jailbroke the test iPhone.

Explicit Confidence 99% · John Scott-Railton EP 100 Details

“we had just observed a remote jailbreak on this iPhone”

John Scott-Railton · offsets 9112–9166

Pegasus USES zero-click exploit

The episode says NSO sold a zero-click WhatsApp exploit to customers as a way to deploy Pegasus without requiring the victim to click.

Explicit Confidence 96% · Jack Rhysider EP 100 Details

“NSO was in fact selling this exploit to its customers”

Jack Rhysider · offsets 47320–47373

FBI USES Magic Lantern

According to information obtained through a Freedom of Information request, the FBI used Magic Lantern to capture keystrokes on target computers.

Attributed Confidence 97% · Jack Rhysider EP 100 Details

“the FBI uses this Magic Lantern malware to capture keystrokes on target computers”

Jack Rhysider · offsets 1274–1355

Windows 98 accessibility-feature login bypass AFFECTS Windows 98

The login-bypass exploit was used against a computer running Windows 98.

Explicit Confidence 99% · Jack Rhysider EP 101 Details

“puts it in the computer running Windows 98”

Jack Rhysider · offsets 41308–41350

Windows 98 accessibility feature vulnerability AFFECTS Windows 98

The accessibility-feature vulnerability is presented as affecting the Windows 98 system Os encountered.

Explicit Confidence 94% · Os EP 101 Details

“what do you have for 1998 Windows systems?”

Os · offsets 40472–40514

“a log-in screen for Windows 98”

Os · offsets 39266–39296

Puerto Rico lottery fraud DISCOVERED_BY Os

Os and his team uncovered the database manipulation and traced it to an insider.

Explicit Confidence 99% · Jack Rhysider EP 101 Details

“Os has cracked the case”

Jack Rhysider · offsets 55044–55067

“He’s figured out how the millions of dollars are being stolen from the lottery”

Jack Rhysider · offsets 55070–55148

Windows 98 accessibility-feature login bypass EXPLOITS Windows 98 accessibility feature vulnerability

The Windows 98 accessibility-feature login-bypass exploit exploits the accessibility-feature vulnerability described in the episode.

Derived Confidence 90% · Os EP 101 Details

“The accessibility feature – I can’t remember what the actual vulnerability was, but basically ended up being able to create an exploit”

Os · offsets 40564–40698

Puerto Rico lottery fraud INVOLVES Puerto Rico lottery

The incident concerned millions of dollars being stolen through the Puerto Rico lottery and manipulation of its payout system.

Explicit Confidence 99% · Os EP 101 Details

“we are losing millions and millions of dollars a month through the lottery of Puerto Rico”

Os · offsets 13438–13527

“Someone inside the lottery IT team was going into the database and changing one number”

Jack Rhysider · offsets 51592–51678

Puerto Rico lottery fraud INVOLVES Government of Puerto Rico

The investigation was commissioned and authorized by the Government of Puerto Rico, including the governor and government systems.

Explicit Confidence 98% · Jack Rhysider EP 101 Details

“The government of Puerto Rico hired this consulting agency to come do some work”

Jack Rhysider · offsets 11700–11779

“The governor of Puerto Rico looks at me and the team”

Os · offsets 25780–25832

Puerto Rico lottery fraud INVOLVES United States Marine Corps

The incident account involves Os’s prior Marine Corps cybersecurity experience, which he drew on while investigating the lottery network.

Derived Confidence 78% · Jack Rhysider EP 101 Details

“Os has done a number of penetration tests before he did offensive work while in the Marines”

Jack Rhysider · offsets 28893–28984

Puerto Rico lottery fraud INVOLVES Federal Bureau of Investigation

The FBI investigated the lottery fraud, received Os’s evidence, and took over most of the investigation.

Explicit Confidence 99% · Os EP 101 Details

“I immediately have to contact the bureau, the FBI field office in Puerto Rico”

Os · offsets 52168–52245

“The bureau took over most of the investigation”

Os · offsets 59910–59956

Puerto Rico lottery fraud INVOLVES cartel

The lottery fraud was linked to a cartel operation involving money laundering through winning lottery tickets, according to the episode’s account of the investigation and court records.

Attributed Confidence 96% · Os EP 101 Details

“they were also running guns and drugs through that process”

Os · offsets 61347–61405

“the court records show that they had someone inside the lottery who would produce winning lottery tickets”

Jack Rhysider · offsets 64273–64378

Os MEMBER_OF United States Marine Corps

Os joined the Marine Corps specifically to pursue computer and cybersecurity work and served five years active duty.

Explicit Confidence 99% · Os EP 101 Details

“I chose the Marine Corps specifically”

Os · offsets 6240–6277

“I spent five years active duty”

Os · offsets 10361–10391

Puerto Rico lottery OPERATED_BY Department of Treasury

The episode states that the Puerto Rico lottery is run by the Department of Treasury.

Explicit Confidence 99% · Jack Rhysider EP 101 Details

“It’s been running since 1934 and is ran by the Department of Treasury”

Jack Rhysider · offsets 14624–14693

Jack Rhysider REFERENCES Full Metal Jacket

Jack references Full Metal Jacket and discusses a specific boot-camp scene from the film as an analogy for Marine Corps training.

Explicit Confidence 99% · Jack Rhysider EP 101 Details

“it reminds me of a very specific scene in the movie Full Metal Jacket”

Jack Rhysider · offsets 7544–7613

cartel USES BlackBerry phones

The indictment reportedly claimed that people in the cartel operation used BlackBerry phones to communicate.

Attributed Confidence 94% · Jack Rhysider EP 101 Details

“they used BlackBerry phones to communicate”

Jack Rhysider · offsets 65500–65545

Os USES digital forensics

Os performed defensive and forensic cybersecurity work in the Marine Corps and later at a consulting firm.

Explicit Confidence 95% · Os EP 101 Details

“So, I did both”

Os · offsets 9769–9783

“They were doing forensics and other cyber-security kinda stuff”

Os · offsets 11036–11098

Os USES network enumeration

Os enumerated the internal network to map reachable systems and identify the lottery network structure.

Explicit Confidence 99% · Os EP 101 Details

“So, I actually enumerate the network”

Os · offsets 44514–44550

Os USES Nmap

Os included Nmap in his portable tool suite and used scans to examine the lottery network.

Explicit Confidence 98% · Os EP 101 Details

“a bunch of tools on it like Nmap and freaking man-in-the-middle tools”

Os · offsets 43930–43999

“Nmap scans are also common”

Jack Rhysider · offsets 44812–44838

Os USES warez scene

Os says that in the early days he participated in the warez scene as an administrator, rooter, and cracker producing zero-day releases.

Explicit Confidence 99% · Os EP 101 Details

“I used to run around in the warez scene as a wares administrator and a rooter”

Os · offsets 3397–3474

Os USES Password hash cracking

Os attempted to crack password hashes obtained from the compromised Windows computer.

Explicit Confidence 99% · Jack Rhysider EP 101 Details

“he grabs this hash file to try to crack the passwords on this computer”

Jack Rhysider · offsets 42804–42874

Os USES penetration testing

Os conducted penetration tests as part of his offensive cybersecurity work and consulting work.

Explicit Confidence 98% · Jack Rhysider EP 101 Details

“he’s a pen tester”

Jack Rhysider · offsets 33000–33020

“Os has done a number of penetration tests before he did offensive work while in the Marines”

Jack Rhysider · offsets 28893–28984