Claim

Baja INVOLVES web shell

The attackers used web shells to obtain direct remote access to Sophos Firewalls.

Episode
EP 174 — Pacific Rim
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Andrew Brandt
Attributed source
—

Transcript evidence

“they’re putting just regular old web shells on the firewalls”

Andrew Brandt · offsets 46018–46078

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:59:46.082354+00:00

claim:ep174:874a8df9b67a