Person
person:daniel_kelley
Also: Daniel
Guest who describes his history of hacking, extortion, conviction, and later vulnerability disclosure work.
Guest who describes his history of hacking, extortion, conviction, and later vulnerability disclosure work.
“This is the wild and strange story of Mr. Daniel Kelley.”
“Thanks to Daniel Kelley for sharing this story with us.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | World of Warcraft | Explicit | 117 |
| outgoing | USES | booter | Explicit | 117 |
| outgoing | USES | Skype Resolver | Explicit | 117 |
| outgoing | USES | Google dorking | Explicit | 117 |
| outgoing | USES | responsible disclosure | Explicit | 117 |
| outgoing | USES | responsible disclosure | Explicit | 117 |
| outgoing | USES | Mirai | Explicit | 117 |
| outgoing | USES | blackmail and extortion campaign | Explicit | 117 |
| outgoing | USES | Bitcoin | Explicit | 117 |
| outgoing | USES | Tor | Explicit | 117 |
| outgoing | USES | VPN | Explicit | 117 |
| outgoing | USES | bug bounty program | Explicit | 117 |
| outgoing | USES | MITRE CVE program | Explicit | 117 |
| incoming | DISCOVERED_BY | cross-site scripting | Explicit | 117 |
| incoming | INVOLVES | TalkTalk incident | Explicit | 117 |
Daniel Kelley USES World of Warcraft
Daniel says he was obsessed with World of Warcraft and spent thousands of hours playing it competitively.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I used to be obsessed with a certain game called World of Warcraft”
Daniel Kelley USES booter
As a teenager, Daniel used a booter to conduct a DDoS attack against another player's connection.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“So, I had a booter and Skype Resolver, and I decided to test this theory”
Daniel Kelley USES Skype Resolver
Daniel used the Skype Resolver to obtain another player's IP address before DDoSing him.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“So, I had a booter and Skype Resolver, and I decided to test this theory”
Daniel Kelley USES Google dorking
Daniel learned and used Google dorking to find potentially vulnerable websites.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“This is where he learned about Google dorking”
cross-site scripting DISCOVERED_BY Daniel Kelley
Daniel found a cross-site scripting vulnerability on a Microsoft subdomain.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I found a cross-site scripting vulnerability in – on a subdomain in this login panel”
Daniel Kelley USES responsible disclosure
Daniel submitted the proof of concept for the Microsoft XSS vulnerability through Microsoft's responsible disclosure process.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I basically took the proof of concept and submitted it to Microsoft’s security team”
Daniel Kelley USES Mirai
Daniel was given access to a Mirai botnet and used it to attack his college's network.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I basically had access to this botnet. It was essentially a Mirai botnet”
Daniel Kelley USES blackmail and extortion campaign
Daniel describes conducting a hacking spree involving blackmail and extortion of website owners.
Explicit Direction flagged Confidence 99% · Daniel Kelley EP 117 Details
“my criminality essentially escalated from low-level offending to blackmail, fraud, and computer hacking”
Daniel Kelley USES Bitcoin
Daniel demanded Bitcoin in exchange for not publishing stolen data or vulnerability information.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“What Daniel was asking was anywhere between five and forty Bitcoin”
TalkTalk incident INVOLVES Daniel Kelley
Daniel was involved in the incident by using data obtained from the TalkTalk breach to send a ransom demand, although he says a friend carried out the database download.
Explicit Confidence 98% · Daniel Kelley EP 117 Details
“I had access to this data and I basically decided to gather all of the e-mails from the data”
Daniel Kelley USES Tor
Daniel says he used Tor when sending the TalkTalk extortion email.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“when I sent the extortion e-mail to TalkTalk, I used Tor”
Daniel Kelley USES VPN
Daniel used a VPN for another extortion operation and reused its Bitcoin address in the TalkTalk case, allowing investigators to link the offenses.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I had hacked and blackmailed another company without using Tor; I only used a VPN”
Daniel Kelley USES bug bounty program
After his conviction and while on bail, Daniel began participating in bug bounty programs.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I started engaging in all of these bug bounty programs”
Daniel Kelley USES responsible disclosure
Daniel reports that he spent two years responsibly disclosing vulnerabilities rather than exploiting or extorting companies.
Explicit Confidence 99% · Daniel Kelley EP 117 Details
“I started engaging in responsible disclosure”
Daniel Kelley USES MITRE CVE program
Daniel reported vulnerabilities through MITRE's CVE program and sought publication of CVE identifiers after vendors patched the issues.
Explicit Confidence 99% · Jack Rhysider EP 117 Details
“One place he liked reporting bugs to was MITRE’s CVE program”