Claim

Cloud Hopper INITIAL_ACCESS_VIA Remote Desktop

The investigated server was initially accessed through Remote Desktop with a stolen MSP employee account.

Episode
EP 103 — Cloud Hopper
Origin
Explicit
Confidence
96% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“They logged into it and put the malware on.”

Jack Rhysider · offsets 28606–28649

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:19:40.896704+00:00

claim:ep103:d84583254380