Person
person:higinio_ochoa
Also: Anonw0rmer, Hig, Hig Ochoa, w0rmer
Person identified in the episode as w0rmer’s real name and as the individual arrested for the police-website hacks.
Person identified in the episode as w0rmer’s real name and as the individual arrested for the police-website hacks.
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
“The FBI had enough information to positively believe that Higinio Ochoa was the name of the person conducting these hacks.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ASSOCIATED_WITH | Anonymous | Explicit | 63 |
| outgoing | MEMBER_OF | CabinCr3w | Explicit | 63 |
| outgoing | USES | Python | Explicit | 63 |
| outgoing | EXPLOITS | SQL injection vulnerability | Explicit | 63 |
| outgoing | USES | Website scanning | Explicit | 63 |
| outgoing | USES | Doxxing | Explicit | 63 |
| outgoing | USES | Pastebin | Explicit | 63 |
| outgoing | USES | Explicit | 63 | |
| outgoing | USES | Open-source intelligence | Attributed | 63 |
| outgoing | DISCOVERED_BY | FBI | Attributed | 63 |
| outgoing | USES | Exif metadata | Explicit | 63 |
| outgoing | USES | Cisco wireless access point | Explicit | 63 |
| incoming | INVOLVES | Anonymous PayPal attack | Explicit | 63 |
| incoming | ATTRIBUTED_TO | West Virginia Police Department website hack | Explicit | 63 |
| incoming | ATTRIBUTED_TO | Alabama Department of Public Safety website hack | Explicit | 63 |
| incoming | ATTRIBUTED_TO | Texas Department of Public Safety website hack | Explicit | 63 |
| incoming | SAME_AS | W0Rmer | Explicit | 63 |
Higinio Ochoa ASSOCIATED_WITH Anonymous
Higinio says he adopted Anonymous because its ideals combined fun with social justice, while Jack emphasizes that Anonymous has no well-defined membership.
Explicit Confidence 96% · W0Rmer EP 63 Details
“that kind of lent itself from the adoption of Anonymous by me”
“Nobody is really a member of Anonymous.”
Higinio Ochoa MEMBER_OF CabinCr3w
Jack states that w0rmer joined the hacking crew CabinCr3w.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“W0rmer joined up with a hacking crew called CabinCr3w”
Higinio Ochoa USES Python
Higinio says he wrote a Python application to monitor Twitter trends and inject calls to action.
Explicit Confidence 99% · W0Rmer EP 63 Details
“I wrote a Python application that would actually look at Twitter trends”
Anonymous PayPal attack INVOLVES Higinio Ochoa
Higinio says he was present in the chat rooms from the planning phases through launch and helped organize participation in the attack.
Explicit Confidence 97% · W0Rmer EP 63 Details
“I was in the chatrooms when that was going on, yeah, from the planning phases to the kicking it off”
“I was definitely part of the machine”
West Virginia Police Department website hack ATTRIBUTED_TO Higinio Ochoa
The West Virginia police website hack is attributed in the episode to Higinio Ochoa/w0rmer.
Explicit Confidence 96% · Jack Rhysider EP 63 Details
“The first one that he found that was vulnerable was the police department’s website in West Virginia.”
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
Higinio Ochoa EXPLOITS SQL injection vulnerability
Jack says w0rmer exploited an SQL injection vulnerability to enter the West Virginia police website.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he hacked into the West Virginia Police Department’s website using an SQL injection”
Higinio Ochoa USES Website scanning
Higinio programmatically scanned police department websites for vulnerabilities.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he would use his computer to programmatically scan each website to see if any of them were vulnerable”
Higinio Ochoa USES Doxxing
Higinio published police officers’ personal information after obtaining it from police department databases.
Explicit Confidence 99% · W0Rmer EP 63 Details
“I was after names and addresses”
“Pastebin or Ghostbin or one of the bins and then send it out”
Higinio Ochoa USES Pastebin
Higinio says he used Pastebin or similar paste sites to distribute database dumps and police information.
Explicit Confidence 99% · W0Rmer EP 63 Details
“Pastebin or Ghostbin or one of the bins and then send it out”
Higinio Ochoa USES Twitter
Higinio used Twitter to amplify calls to action and claim or publicize the police hacks.
Explicit Confidence 99% · W0Rmer EP 63 Details
“look at Twitter trends and then inject our call-to-action”
“I had a whole workflow for that. I had my dirty images and then I would clean them and put them in another file. When I went to publish that, I went one, two, three, and so, man, I need one more photo. I grabbed the wrong one, put it in there, and hit tweet”
Alabama Department of Public Safety website hack ATTRIBUTED_TO Higinio Ochoa
The Alabama Department of Public Safety website hack is presented as one of w0rmer’s hacks.
Explicit Confidence 96% · Jack Rhysider EP 63 Details
“The next police department website he found vulnerable was Alabama Department of Public Safety”
“As w0rmer would hack the police”
Texas Department of Public Safety website hack ATTRIBUTED_TO Higinio Ochoa
The Texas Department of Public Safety data release is presented as another hack claimed and published by w0rmer.
Explicit Confidence 94% · Jack Rhysider EP 63 Details
“You got the DPS Alabama Police Department; that’s been owned.”
“This CabinCr3w is proud to present and release texasdps.state.tx.us data.”
Higinio Ochoa USES Open-source intelligence
The FBI used open-source intelligence to connect the w0rmer identity with Higinio Ochoa.
Attributed Confidence 97% · Jack Rhysider EP 63 Details
“the FBI did some open-source intelligence, just Googling things like putting w0rmer and Higinio Ochoa together”
Higinio Ochoa DISCOVERED_BY FBI
The FBI investigation identified Higinio Ochoa as the person conducting the police department hacks.
Attributed Direction flagged Confidence 98% · Jack Rhysider EP 63 Details
“the FBI had enough information to positively believe that Higinio Ochoa was the name of the person conducting these hacks”
W0Rmer SAME_AS Higinio Ochoa
The episode explicitly states that w0rmer’s real name was Higinio Ochoa, or Hig.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“W0rmer’s real name is in fact Higinio, or Hig, for short.”
Higinio Ochoa USES Exif metadata
Higinio used Exif/GPS metadata in photographs to determine where they had been taken, and accidentally published one photograph without removing that metadata.
Explicit Confidence 99% · Jack Rhysider EP 63 Details
“he was able to look to see where these photos were taken”
“I already knew the GPS Exif data was in them”
Higinio Ochoa USES Cisco wireless access point
Higinio says he broke into a newly visible Cisco wireless access point and scanned the laptop connected to it.
Explicit Confidence 96% · W0Rmer EP 63 Details
“I notice there’s a new Cisco wireless AP.”
“So, cracked into that. Scanned, realized it was hooked up to a laptop.”