The episode says most bank robberies associated with the group occurred in Ukraine and Russia.
Explicit Confidence 98% · Jack Rhysider EP 35 Details
“most bank robberies occurred in Ukraine and Russia”
Country
country:ukraine
Also: Ukrainian
Country named as a destination to which stolen-card data was sent from one compromised point-of-sale system.
Country named as a destination to which stolen-card data was sent from one compromised point-of-sale system.
“sending them to either Ukraine or this Hop One server”
Country where one of the investigated banks and several ATM attacks were located.
“an IT guy working at a bank in Ukraine.”
Country to which the insider moved the company’s hosting infrastructure.
“took all of their hosting and moved it to Ukraine”
The primary geographic target of the NotPetya attack and the broader cyber-attack campaign described in the episode.
“the target of this attack was Ukraine”
“it hit Ukraine at a national scale.”
Country identified as the origin of three people arrested in connection with the Conficker investigation.
“the FBI who then arrested three Ukrainians”
Country targeted by destructive malware and by phishing operations associated with the actors later linked to Olympic Destroyer.
“these worms released in Ukraine”
“One seemed to target Ukrainian LGBT activist groups”
Country associated with the hackers and the location of surveillance, raids, and several participants.
“a guy who was in his twenties from Ukraine called Ivan Turchynov”
“nine properties in Kiev were raided”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | TARGETS | Carbanak | Explicit | 35 |
| incoming | ASSOCIATED_WITH | Denis K | Explicit | 35 |
| incoming | TARGETS | NotPetya | Explicit | 54 |
| incoming | ATTRIBUTED_TO | Newswire hacking and insider-trading scheme | Explicit | 123 |
The episode says most bank robberies associated with the group occurred in Ukraine and Russia.
Explicit Confidence 98% · Jack Rhysider EP 35 Details
“most bank robberies occurred in Ukraine and Russia”
Denis K ASSOCIATED_WITH Ukraine
Jack says Denis K was from Ukraine and was arrested in Spain in connection with the operation.
Explicit Confidence 99% · Jack Rhysider EP 35 Details
“A guy named Denis K was arrested in Spain. He was from the Ukraine”
The stated target was Ukraine, including its businesses and government agencies, with the goal of taking down as many Ukrainian computers as possible.
Explicit Confidence 99% · Jack Rhysider EP 54 Details
“the target of this attack was Ukraine and the goal was to take out as many computers as possible in Ukraine; businesses, government agencies, doesn’t matter.”
Newswire hacking and insider-trading scheme ATTRIBUTED_TO Ukraine
The prosecution described the hackers as largely operating in Ukraine.
Explicit Confidence 99% · Paul Fishman EP 123 Details
“hackers largely operating in Ukraine repeatedly penetrated the networks and servers”