Joseph Harris USES social engineering
Joseph says he began by socially engineering email providers and account owners.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I started kind of as a social engineer”
Person
person:joseph_harris
Also: Joseph
Guest who describes his progression from gaming-account theft and social engineering to cryptocurrency theft and SIM-swapping.
Guest who describes his progression from gaming-account theft and social engineering to cryptocurrency theft and SIM-swapping.
“One of the people I mention in that episode who was doing this was Joseph Harris.”
“A big thank you to Joseph Harris for sharing this story with us.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | social engineering | Explicit | 118 |
| outgoing | USES | social engineering | Explicit | 118 |
| outgoing | USES | Account takeover | Explicit | 118 |
| outgoing | EXPLOITS | GMX session manipulation vulnerability | Explicit | 118 |
| outgoing | USES | Cryptsy | Explicit | 118 |
| outgoing | USES | LocalBitcoins | Explicit | 118 |
| outgoing | ASSOCIATED_WITH | Lizard Squad | Explicit | 118 |
| outgoing | USES | Credential stuffing and password mutation | Explicit | 118 |
| outgoing | USES | SIM swapping | Explicit | 118 |
| outgoing | EXPLOITS | Gmail cookie-validation vulnerability | Explicit | 118 |
| outgoing | EXPLOITS | Verizon account-number disclosure vulnerability | Explicit | 118 |
| outgoing | TARGETS | Crowd Machine | Explicit | 118 |
| outgoing | USES | Google Drive | Explicit | 118 |
| outgoing | USES | MetaMask | Explicit | 118 |
| outgoing | USES | Private key and seed-phrase theft | Explicit | 118 |
| outgoing | USES | Monero | Explicit | 118 |
Joseph Harris USES social engineering
Joseph says he began by socially engineering email providers and account owners.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I started kind of as a social engineer”
Joseph Harris USES Account takeover
Joseph took over victims’ email and gaming accounts in order to sell them.
Explicit Confidence 98% · Joseph Harris EP 118 Details
“take the accounts and then sell them for money”
Joseph Harris USES social engineering
Joseph used victims’ names and addresses to persuade email providers to reset passwords.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“all you need to know is someone’s name and address and you can completely take over their AOL account”
Joseph Harris EXPLOITS GMX session manipulation vulnerability
Joseph used the GMX session-manipulation vulnerability to take over GMX accounts.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“he’d use this vulnerability, get into that person’s e-mail account”
Joseph Harris USES Cryptsy
Joseph accessed a Cryptsy account, converted the altcoin to Bitcoin, and then converted it to PayPal.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I got into someone’s Cryptsy account”
Joseph Harris USES LocalBitcoins
Joseph used LocalBitcoins to exchange stolen Bitcoin for PayPal funds.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“The way he would get the Bitcoin into his PayPal wallet was using LocalBitcoins”
Joseph Harris ASSOCIATED_WITH Lizard Squad
Joseph says he knew people in Lizard Squad and was contacted by one of its members for help accessing accounts.
Explicit Confidence 94% · Joseph Harris EP 118 Details
“I knew some people that I’m not sure if you’ve heard of them; Lizard Squad”
Joseph Harris USES Credential stuffing and password mutation
Joseph searched breach data for passwords and tried common variants and site-specific mutations.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I’m copying these passwords, I’m trying them with variants”
Joseph Harris USES SIM swapping
Joseph learned and used SIM-swapping to take over phones and reset email passwords.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I started dabbling with it”
“I’m getting a text directly to that phone in my hand”
Joseph Harris EXPLOITS Gmail cookie-validation vulnerability
Joseph used fake cookies to make Gmail believe he had previously logged into a victim’s account, enabling password resets.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I was able to get it so it would appear that way for any account”
Joseph Harris EXPLOITS Verizon account-number disclosure vulnerability
Joseph used a Verizon website flaw that disclosed account numbers to obtain the information needed to take over accounts.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I find a JavaScript variable that has the account number just completely disclosed right there”
Joseph Harris TARGETS Crowd Machine
Joseph shifted from targeting individual crypto holders to targeting Crowd Machine, a company holding cryptocurrency.
Explicit Confidence 98% · Jack Rhysider EP 118 Details
“Instead of targeting people with crypto, why not target companies that have crypto?”
Joseph Harris USES Google Drive
Joseph accessed Google Drive accounts to search for cryptocurrency wallet backups, seed phrases, and private keys.
Explicit Confidence 98% · Jack Rhysider EP 118 Details
“he would find ways into this and start looking around for interesting stuff there”
Joseph Harris USES MetaMask
Joseph used MetaMask to load a recovered passphrase and access a Crowd Machine wallet.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I put that new numeric passphrase in MetaMask, it loads up the wallet”
Joseph Harris USES Private key and seed-phrase theft
Joseph stole cryptocurrency by finding backup seed phrases and private keys in victims’ cloud accounts and source code.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“There was a hack I did that I made millions of dollars essentially by finding a backup seed”
“I access the private key and it has about $17 million in it”
Joseph Harris USES Monero
Joseph used Monero to launder stolen cryptocurrency and obscure its origin.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I’d change the crypto to Monero”