Zain Qaiser USES Angler
Zain obtained and deployed Angler as the exploit kit for his ransomware operation.
Explicit Confidence 98% · Jack Rhysider EP 44 Details
“He got the Angler Exploit Kit which is good at getting into the victim’s computer”
Person
person:zain_qaiser
Also: K!NG
UK-based operator of a large ransomware and malvertising scam discussed in the episode.
UK-based operator of a large ransomware and malvertising scam discussed in the episode.
“This is a story about a guy named Zain Qaiser.”
“In early 2012, Zain was very active in chat rooms and forums using his username K!NG”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Angler | Explicit | 44 |
| outgoing | USES | Reveton | Explicit | 44 |
| outgoing | ASSOCIATED_WITH | Russian crime group | Explicit | 44 |
| outgoing | USES | social engineering | Explicit | 44 |
| outgoing | USES | malvertising | Explicit | 44 |
| outgoing | USES | GreenDot MoneyPak | Explicit | 44 |
| outgoing | USES | Liberty Reserve | Explicit | 44 |
| outgoing | USES | distributed denial-of-service attack | Explicit | 44 |
Zain Qaiser USES Angler
Zain obtained and deployed Angler as the exploit kit for his ransomware operation.
Explicit Confidence 98% · Jack Rhysider EP 44 Details
“He got the Angler Exploit Kit which is good at getting into the victim’s computer”
Zain Qaiser USES Reveton
Zain used Reveton as the ransomware payload in his operation.
Explicit Confidence 99% · Jack Rhysider EP 44 Details
“Zain decided to weaponize Angler with Reveton.”
“the Reveton ransomware that Zain equipped into Angler”
Zain Qaiser ASSOCIATED_WITH Russian crime group
Jack describes an agreement and partnership between Zain and the Russian crime group that created or supplied Angler.
Explicit Confidence 98% · Jack Rhysider EP 44 Details
“with his agreement with the Russian crime group in place”
“It was a partnership pitch and one of the Russians were open to hearing this pitch. An agreement was made.”
Zain Qaiser USES social engineering
Zain told the Angler creators that he was experienced in social engineering and used manipulation to run the scheme.
Explicit Confidence 99% · Jack Rhysider EP 44 Details
“Zain tells them that he’s experienced in social engineering and that he’s good at manipulating people”
Zain Qaiser USES malvertising
Zain bought online advertisements that redirected users to malicious websites hosting the Angler exploit kit.
Explicit Confidence 99% · Jack Rhysider EP 44 Details
“This is a typical example of malvertising.”
“Zain laced his adverts with redirects to websites infected with malware, the Angler Exploit Kit.”
Zain Qaiser USES GreenDot MoneyPak
Zain's Reveton ransom process instructed victims to pay using GreenDot MoneyPak cards.
Explicit Confidence 96% · Jack Rhysider EP 44 Details
“the solution was GreenDot MoneyPak prepaid cards”
“The Reveton ransom screen gave the user details, instructions on how to pay their fee.”
Zain Qaiser USES Liberty Reserve
Zain used Liberty Reserve to transfer ransom proceeds to his Russian associates.
Explicit Confidence 99% · Jack Rhysider EP 44 Details
“Zain would collect the money and then use Liberty Reserve to transfer it to his Russian associates”
Zain Qaiser USES distributed denial-of-service attack
Zain launched revenge DDoS attacks against advertising websites that questioned or rejected him.
Explicit Confidence 99% · Jack Rhysider EP 44 Details
“Zain then launched a revenge distributed denial-of-service attack on these advertising sites”
“Zain then launched more denial-of-service attacks against the websites that were questioning him.”