Edwin MEMBER_OF The Guild of the Grumpy Old Hackers
Edwin is one of the members of The Guild of the Grumpy Old Hackers.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“So, collectively you’re called what?”
“I’m Edwin. I’m old.”
Organisation
organisation:the_guild_of_the_grumpy_old_hackers
Also: Guild of the Grumpy Old Hackers, The Grumps, The Guild of the Grumpies
Dutch hacking club made up of Edwin, Matt, Victor, and other members who perform security research and responsible disclosures.
Dutch hacking club made up of Edwin, Matt, Victor, and other members who perform security research and responsible disclosures.
“The Guild of the Grumpy Old Hackers.”
“we are also The Guild of the Grumpies”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ASSOCIATED_WITH | Dutch Institute of Vulnerability Disclosure | Explicit | 87 |
| outgoing | ASSOCIATED_WITH | Hack_Right | Explicit | 87 |
| outgoing | ASSOCIATED_WITH | BruCON | Explicit | 87 |
| outgoing | USES | password reuse | Derived | 87 |
| outgoing | USES | Open-source intelligence | Explicit | 87 |
| outgoing | USES | SMTP enumeration | Explicit | 87 |
| outgoing | USES | User-agent spoofing | Explicit | 87 |
| outgoing | USES | Open proxy routing | Explicit | 87 |
| outgoing | USES | responsible disclosure | Explicit | 87 |
| outgoing | USES | Credential stuffing | Explicit | 87 |
| incoming | MEMBER_OF | Edwin | Explicit | 87 |
| incoming | MEMBER_OF | Matt | Explicit | 87 |
| incoming | MEMBER_OF | Victor | Explicit | 87 |
| incoming | ATTRIBUTED_TO | Trump Twitter account compromise (2016) | Explicit | 87 |
Edwin MEMBER_OF The Guild of the Grumpy Old Hackers
Edwin is one of the members of The Guild of the Grumpy Old Hackers.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“So, collectively you’re called what?”
“I’m Edwin. I’m old.”
Matt MEMBER_OF The Guild of the Grumpy Old Hackers
Matt is one of the members of The Guild of the Grumpy Old Hackers.
Explicit Confidence 98% · Jack Rhysider EP 87 Details
“Also on the call is Matt.”
“My name is Matt and I spent a twenty-year professional computer security career”
Victor MEMBER_OF The Guild of the Grumpy Old Hackers
Victor is identified as one of the three hackers in the Guild who hacked Donald Trump's Twitter account.
Explicit Confidence 96% · Jack Rhysider EP 87 Details
“I called up the three guys that in 2016 hacked Donald Trump’s Twitter account.”
“Then there’s Victor.”
The Guild of the Grumpy Old Hackers ASSOCIATED_WITH Dutch Institute of Vulnerability Disclosure
The Guild members work with the Dutch Institute of Vulnerability Disclosure.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“Victor works with the Dutch Institute of Vulnerability Disclosure, something Edwin and Matt help out with, too.”
The Guild of the Grumpy Old Hackers ASSOCIATED_WITH Hack_Right
The Guild works with Hack_Right, a Dutch law-enforcement program intended to redirect young offenders toward ethical hacking.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“They work with Hack_Right, a Dutch law enforcement program that helps put young offenders back on track.”
The Guild of the Grumpy Old Hackers ASSOCIATED_WITH BruCON
The Guild members attended BruCON in Belgium when the Trump account incident began.
Explicit Confidence 99% · Edwin EP 87 Details
“We were at a conference called BruCON in Belgium.”
Trump Twitter account compromise (2016) ATTRIBUTED_TO The Guild of the Grumpy Old Hackers
The 2016 Trump Twitter account compromise is attributed in the episode to The Guild of the Grumpy Old Hackers.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“The second time his Twitter account got hacked was in 2016, the year he was running for president, and it was done by some grumpy old hackers.”
“the three guys that in 2016 hacked Donald Trump’s Twitter account”
The Guild of the Grumpy Old Hackers USES password reuse
The Guild tested a password recovered from Trump's LinkedIn credentials against his Twitter account.
Derived Confidence 99% · Matt EP 87 Details
“Would he be so stupid to use – to reuse his password for his Twitter accounts?”
“He went straightaway to twitter.com, typed in the username @realDonaldTrump and typed in the password ‘yourefired’.”
The Guild of the Grumpy Old Hackers USES Open-source intelligence
The Guild used publicly available information to identify possible email addresses associated with Trump.
Explicit Confidence 99% · Victor EP 87 Details
“We acted on OSINT. We acted on publicly available information”
The Guild of the Grumpy Old Hackers USES SMTP enumeration
The Guild used SMTP enumeration on Trump's domains to identify valid email addresses.
Explicit Confidence 99% · Victor EP 87 Details
“we used SMTP enumeration on his domains, over the e-mail domains.”
The Guild of the Grumpy Old Hackers USES User-agent spoofing
The Guild modified its user agent to imitate Trump's Samsung Galaxy S3.
Explicit Confidence 99% · Victor EP 87 Details
“You had to start messing with your user agent because you know that he’s using a very old Android phone”
“they switched their user agent to look like Trump’s Samsung S3”
The Guild of the Grumpy Old Hackers USES Open proxy routing
The Guild routed its traffic through an open HTTP proxy in New York to appear to be logging in from Trump's normal region.
Explicit Confidence 99% · Jack Rhysider EP 87 Details
“they used an open HTTP proxy in New York to route their traffic through that to log into Twitter”
The Guild of the Grumpy Old Hackers USES responsible disclosure
The Guild documented the access and reported the vulnerability to Trump and relevant authorities.
Explicit Confidence 99% · Victor EP 87 Details
“Now comes the responsible task of documenting everything”
“The Grumps put their findings and suggestions into an e-mail and sent it over to Trump.”
The Guild of the Grumpy Old Hackers USES Credential stuffing
The Guild warned people that passwords exposed in the LinkedIn dump could be reused to access other accounts.
Explicit Confidence 98% · Victor EP 87 Details
“Most were very grateful because credential stuffing was not such a big topic in 2016 but it was going on.”