Claim

Carbanak INVOLVES lateral movement

After obtaining one administrator password, the attackers reused it on other servers and reached the domain controller.

Episode
EP 35 — Carbanak
Origin
Explicit
Confidence
98% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“Now that they have the admin password to one of the computers they’ll try to use that password on another server.”

Jack Rhysider · offsets 30720–30833

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T05:37:12.601720+00:00

claim:ep035:8e3b74134987