Gal Vallerius SAME_AS OxyMonster
The DEA found a matching private PGP key and Jack says this proved Gal Vallerius was OxyMonster.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“This proved that Gal Vallerius was OxyMonster”
Threat actor
threat_actor:oxymonster
Darknet-market identity used by Gal Vallerius; the account operated as an administrator, moderator, and drug vendor on Dream Market.
Darknet-market identity used by Gal Vallerius; the account operated as an administrator, moderator, and drug vendor on Dream Market.
“The username was OxyMonster.”
“This proved that Gal Vallerius was OxyMonster.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Dream Market | Explicit | 58 |
| outgoing | USES | TradeRoute | Explicit | 58 |
| outgoing | USES | Evolution | Explicit | 58 |
| outgoing | USES | Bitcoin | Explicit | 58 |
| outgoing | USES | localbitcoins.com | Explicit | 58 |
| outgoing | USES | PGP | Explicit | 58 |
| incoming | SAME_AS | Gal Vallerius | Explicit | 58 |
Gal Vallerius SAME_AS OxyMonster
The DEA found a matching private PGP key and Jack says this proved Gal Vallerius was OxyMonster.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“This proved that Gal Vallerius was OxyMonster”
OxyMonster USES Dream Market
OxyMonster was an administrator, vendor, and active participant on Dream Market.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“OxyMonster is an admin to Dream Market”
OxyMonster USES TradeRoute
OxyMonster maintained an account and sold drugs on TradeRoute.
Explicit Confidence 98% · Jack Rhysider EP 58 Details
“check out OxyMonster’s account on TradeRoute”
OxyMonster USES Evolution
Jack says OxyMonster was a moderator on the Evolution market.
Explicit Confidence 98% · Jack Rhysider EP 58 Details
“OxyMonster was a mod on the now-defunct Evolution dark market”
OxyMonster USES Bitcoin
OxyMonster used Bitcoin for a tip jar and later cashed out those Bitcoin proceeds.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“OxyMonster cashed out on his tip jar earnings”
OxyMonster USES localbitcoins.com
The DEA observed OxyMonster sending Bitcoin to localbitcoins.com fifteen times to cash out.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“OxyMonster sent his Bitcoin to a website called localbitcoins.com. He did this fifteen times.”
OxyMonster USES PGP
A private PGP key labeled OxyMonster was found on Gal Vallerius’s laptop and matched the key on the OxyMonster account.
Explicit Confidence 99% · Jack Rhysider EP 58 Details
“they found a private PGP key labeled OxyMonster”