Claim

Triton ATTRIBUTED_TO Xenotime

Dragos clustered the related intrusions and named the associated threat actor Xenotime; this identifies the activity group but does not establish a national attribution.

Episode
EP 68 — Triton
Origin
Explicit
Confidence
94% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
Dragos

Transcript evidence

“they created a name for the threat actor and called them Xenotime.”

Jack Rhysider · offsets 49022–49088

“I’m saying it’s this actor, this is Xenotime”

Robert Lee · offsets 57600–57644

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:30:01.749893+00:00

claim:ep068:056935f7861a