Ghost Exodus SAME_AS Jesse McGraw
Jack states that Ghost Exodus was Jesse McGraw.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“Ghost Exodus was Jesse McGraw.”
Person
person:ghost_exodus
Also: Jesse McGraw
Online identity used by Jesse McGraw, who describes his hacking activities and prosecution.
Online identity used by Jesse McGraw, who describes his hacking activities and prosecution.
“My name is Ghost Exodus.”
“Ghost Exodus was Jesse McGraw.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | SAME_AS | Jesse McGraw | Explicit | 70 |
| outgoing | MEMBER_OF | Insane Masterminds Crew | Explicit | 70 |
| outgoing | USES | Rxbot | Explicit | 70 |
| outgoing | USES | denial-of-service attack | Explicit | 70 |
| outgoing | COMPROMISES | HVAC server | Explicit | 70 |
| outgoing | USES | LogMeIn | Explicit | 70 |
| outgoing | USES | Ophcrack | Explicit | 70 |
| outgoing | USES | brute-force password cracking | Derived | 70 |
| outgoing | DISCOVERED_BY | Wesley McGrew | Explicit | 70 |
| incoming | DEVELOPED_BY | Electronik Tribulation Army | Derived | 70 |
Ghost Exodus SAME_AS Jesse McGraw
Jack states that Ghost Exodus was Jesse McGraw.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“Ghost Exodus was Jesse McGraw.”
Ghost Exodus MEMBER_OF Insane Masterminds Crew
Ghost Exodus says he was originally a member of the Insane Masterminds Crew.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“I originally was a member of the Insane Masterminds Crew.”
Electronik Tribulation Army DEVELOPED_BY Ghost Exodus
Ghost Exodus says he started his own hacking group, which became the Electronik Tribulation Army.
Derived Confidence 94% · Jack Rhysider EP 70 Details
“he was able to start his own hacking group, and he named it ETA.”
Ghost Exodus USES Rxbot
The botnet Ghost Exodus used in the clinic was identified as Rxbot.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“The botnet he was using was called Rxbot.”
Ghost Exodus USES denial-of-service attack
Ghost Exodus says he used the bots to launch attacks and later used the botnet to attack targets.
Explicit Confidence 98% · Jack Rhysider EP 70 Details
“I thought of doing was infecting as many computers as possible in order to launch this botnet attack”
“On several occasions, I attacked 94chan with them.”
Ghost Exodus COMPROMISES HVAC server
Ghost Exodus gained access to the clinic's HVAC server and established a persistent remote connection to it.
Explicit Confidence 98% · Jack Rhysider EP 70 Details
“With that, he was able to establish a persistent remote connection to this HVAC server.”
Ghost Exodus USES LogMeIn
Ghost Exodus says he used browser-based LogMeIn to remotely access the HVAC server.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“I decided to use the browser-based LogMeIn.”
Ghost Exodus USES Ophcrack
Ghost Exodus used Ophcrack to obtain passwords from locked Windows computers.
Explicit Confidence 99% · Jack Rhysider EP 70 Details
“He looked up how he could get into a locked computer and found a tool called Ophcrack.”
Ghost Exodus USES brute-force password cracking
Ghost Exodus used Ophcrack's password-cracking process to access clinic computers.
Derived Confidence 97% · Jack Rhysider EP 70 Details
“He would put the Ophcrack CD in the tray, reboot the computer, wait for Ophcrack to find a password”
Ghost Exodus DISCOVERED_BY Wesley McGrew
Wesley investigated the screenshots, identified the clinic, and collected information linking the activity to Ghost Exodus.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 70 Details
“I wanted to find out as much about Ghost Exodus as I could.”
“we contacted the Jackson, Mississippi FBI and handed that information over.”