Claim

Cloud Hopper INVOLVES credential dumping

After entering the network, the attackers ran Mimikatz to collect credentials.

Episode
EP 103 — Cloud Hopper
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“it was then when Mimikatz was run where they grabbed all the credentials”

Jack Rhysider · offsets 34409–34481

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:19:40.896704+00:00

claim:ep103:f286876f4a81