Claim

Defcon financial-data exfiltration ASSOCIATED_WITH Russia

The incident was associated with Russia because the FTP server connection and its IP address were identified as being in Russia; the episode does not establish who operated the server.

Episode
EP 157 — Grifter
Origin
Uncertain
Confidence
93% (extractor score, not a fact score)
Speaker
Grifter
Attributed source
—

Transcript evidence

“That connection to an FTP server in Russia — the IP address was also geolocated to Russia”

Grifter · offsets 70066–70155

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:37:53.087263+00:00

claim:ep157:133344adce5f