Person

Hieu Minh Ngo

person:hieu_minh_ngo Also: Hieu, Hieu.pc

Vietnamese hacker who describes stealing payment-card data and reselling U.S. identity information through online services.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing USES Google dorking Explicit 162
outgoing EXPLOITS SQL injection vulnerability Explicit 162
outgoing EXPLOITS file upload vulnerabilities Explicit 162
outgoing USES cross-site scripting Explicit 162
outgoing USES OSINT Explicit 162
outgoing USES chip dumping Explicit 162
outgoing USES phishing Explicit 162
outgoing USES Malware Explicit 162
outgoing USES Liberty Reserve Explicit 162
outgoing USES identity theft Explicit 162
outgoing DEVELOPED_BY Hieu Minh Ngo Uncertain 162
outgoing MEMBER_OF National Cyber Security Center Explicit 162
incoming DEVELOPED_BY hieupc.com Explicit 162
incoming DEVELOPED_BY Hieu Minh Ngo Uncertain 162
incoming DEVELOPED_BY ussearching.info Derived 162
incoming DEVELOPED_BY superget.info Derived 162
incoming DEVELOPED_BY findget.me Derived 162

Claims

hieupc.com DEVELOPED_BY Hieu Minh Ngo

Hieu says he built his first website, hieupc.com.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I built my first website, hieupc.com”

Hieu Minh Ngo · offsets 2518–2554

Hieu Minh Ngo USES Google dorking

Hieu searched Google using Google dorks to find vulnerable websites.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I searched on Google with those keywords, some of the Google dork”

Hieu Minh Ngo · offsets 8565–8630

Hieu Minh Ngo EXPLOITS SQL injection vulnerability

Hieu exploited SQL injection vulnerabilities in e-commerce sites and data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“that website, it got a SQL injection vulnerability”

Hieu Minh Ngo · offsets 9365–9415

“First; SQL injection”

Hieu Minh Ngo · offsets 31056–31076

Hieu Minh Ngo EXPLOITS file upload vulnerabilities

Hieu says he used file upload vulnerabilities against LocatePLUS and MicroBilt.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“The second one, the file upload vulnerabilities”

Hieu Minh Ngo · offsets 31078–31125

Hieu Minh Ngo USES cross-site scripting

Hieu says he used cross-site scripting when attacking the data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“and the third one, cross-site scripting”

Hieu Minh Ngo · offsets 31127–31166

Hieu Minh Ngo USES OSINT

Hieu used OSINT to compile a list of U.S. data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“doing lots of OSINT to get me a list of all the data brokers in the US”

Hieu Minh Ngo · offsets 22810–22880

Hieu Minh Ngo USES chip dumping

The episode describes Hieu transferring stolen poker chips between accounts to launder money; Jack identifies this as chip dumping.

Explicit Confidence 97% · Jack Rhysider EP 162 Details

“This technique is called chip dumping”

Jack Rhysider · offsets 11497–11534

Hieu Minh Ngo USES phishing

Hieu used phishing emails to compromise private investigators' computers and impersonate them.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I used that to do phishing. I was phishing them to a malware”

Hieu Minh Ngo · offsets 35876–35936

Hieu Minh Ngo USES Malware

Hieu used malware delivered through phishing to gain access to a private investigator's computer.

Explicit Confidence 98% · Hieu Minh Ngo EP 162 Details

“I was phishing them to a malware so I can — got into the computer”

Hieu Minh Ngo · offsets 35904–35969

Hieu Minh Ngo USES Liberty Reserve

Hieu used Liberty Reserve to receive payments for identity searches and launder proceeds.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“Back then, I didn’t use Bitcoin. We used Liberty Reserve”

Hieu Minh Ngo · offsets 33732–33788

Hieu Minh Ngo USES identity theft

Hieu sold U.S. identities and acknowledged that his service enabled identity theft-related activity.

Explicit Confidence 90% · Jack Rhysider EP 162 Details

“Stealing identities and selling that is far less of a crime”

Jack Rhysider · offsets 21927–21986

“I kinda like I hurt and harmed so many people’s lives”

Jack Rhysider · offsets 58800–58865

Hieu Minh Ngo DEVELOPED_BY Hieu Minh Ngo

Hieu says he built a website that sold identity lookups; the episode later identifies its successive domains as ussearching.info, superget.info, and findget.me. This self-link is not appropriate; the supported links are represented below as website-to-person claims.

Uncertain Direction flagged Confidence 10% · Hieu Minh Ngo EP 162 Details

“Then I built a website and then I took that website”

Hieu Minh Ngo · offsets 33139–33190

ussearching.info DEVELOPED_BY Hieu Minh Ngo

The episode identifies ussearching.info as the first domain of the website Hieu built to sell identity searches.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“At first that website’s called ussearching.info”

Hieu Minh Ngo · offsets 44683–44730

superget.info DEVELOPED_BY Hieu Minh Ngo

Hieu says the identity-search website was later operated under the superget.info domain.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“then eventually superget.info and findget.me”

Hieu Minh Ngo · offsets 44735–44779

findget.me DEVELOPED_BY Hieu Minh Ngo

Hieu says the identity-search website was later operated under the findget.me domain.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“then eventually superget.info and findget.me”

Hieu Minh Ngo · offsets 44735–44779

Hieu Minh Ngo MEMBER_OF National Cyber Security Center

After prison, Hieu says he worked for Vietnam’s National Cyber Security Center for four years.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I’ve been working there for four years”