Operation Glowing Symphony OPERATED_BY Joint Task Force ARES
JTF-ARES was tasked to execute Operation Glowing Symphony.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES was tasked to execute Operation Glowing Symphony”
Campaign
campaign:operation_glowing_symphony
Also: OGS
US offensive cyber campaign targeting ISIS media infrastructure and associated accounts, servers, domains, and online services.
US offensive cyber campaign targeting ISIS media infrastructure and associated accounts, servers, domains, and online services.
“Operation Glowing Symphony was a go”
“we’re trying to have a symphony of destruction against the enemy here”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | OPERATED_BY | Joint Task Force ARES | Explicit | 50 |
| outgoing | INVOLVES | Joint Task Force ARES | Explicit | 50 |
| outgoing | TARGETS | ISIS media | Explicit | 50 |
| outgoing | INVOLVES | Credential pivoting | Attributed | 50 |
| outgoing | INVOLVES | Email account compromise | Uncertain | 50 |
| outgoing | INVOLVES | lateral movement | Explicit | 50 |
| outgoing | COMPROMISES | Domain controller | Explicit | 50 |
| incoming | OTHER | Barack Obama | Explicit | 50 |
Operation Glowing Symphony OPERATED_BY Joint Task Force ARES
JTF-ARES was tasked to execute Operation Glowing Symphony.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES was tasked to execute Operation Glowing Symphony”
Operation Glowing Symphony INVOLVES Joint Task Force ARES
Operation Glowing Symphony involved JTF-ARES as the task force carrying out the operation.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“JTF-ARES was formed to carry out a specific mission”
“JTF-ARES was tasked to execute Operation Glowing Symphony”
Operation Glowing Symphony TARGETS ISIS media
The operation's objective was to disrupt and destroy as much of the ISIS media network as possible, including servers, domains, email accounts, and related infrastructure.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“we’re trying to have a symphony of destruction against the enemy here and take down all of the ISIS servers, domains, e-mails, whatever, at the same time.”
“the first mission to take out ISIS media”
Operation Glowing Symphony INVOLVES Credential pivoting
The operation used access to email accounts to pivot into associated accounts and services; the episode presents this as a description of the operation's access method, while the speaker withholds operation-specific details.
Attributed Confidence 84% · Jack Rhysider EP 50 Details
“You can pivot from the e-mail account into the other accounts associated to that e-mail”
“You can pivot from that e-mail address into the AWS account, into the Cloudflare account”
Operation Glowing Symphony INVOLVES Email account compromise
The commander says that access to an email account is a common starting point for cyber-operations; Jack applies this possibility to Operation Glowing Symphony but does not establish it as a fully disclosed operation detail.
Uncertain Confidence 78% · Jack Rhysider EP 50 Details
“If Operation Glowing Symphony was getting into their e-mail accounts”
“It’s access to that e-mail account.”
Operation Glowing Symphony INVOLVES lateral movement
The operation involved moving through accounts, servers, and the network according to a rehearsed sequence of targets.
Explicit Confidence 97% · Jack Rhysider EP 50 Details
“They started moving through parts of the network, moving through accounts, moving through servers, moving through everything”
“They were pivoting and they were all dependent upon each other”
Operation Glowing Symphony COMPROMISES Domain controller
The operation planned to reach domain controllers as an initial foothold and later took over domain controllers during execution.
Explicit Confidence 96% · Jack Rhysider EP 50 Details
“Once you hit the domain controller, you’re good to go”
“taking over domain controllers”
Barack Obama OTHER Operation Glowing Symphony
President Barack Obama is stated to have signed Task Order 16-0063, authorizing Operation Glowing Symphony to proceed.
Explicit Confidence 99% · Jack Rhysider EP 50 Details
“Task Order 16-0063 was signed by President Barack Obama and Operation Glowing Symphony was a go”