Junaid Hussain MEMBER_OF TeaMp0isoN
Nichols identifies TeaMp0isoN as Junaid Hussain's crew.
Explicit Confidence 99% · Jonathan Nichols EP 65 Details
“one of them being Junaid Hussain’s crew. TeaMp0isoN was their name.”
Threat actor
threat_actor:teamp0ison
Also: Junaid Hussain’s crew, Team Poison
Hacker crew identified in the episode as the group associated with Junaid Hussain.
Hacker crew identified in the episode as the group associated with Junaid Hussain.
“one of them being Junaid Hussain’s crew. TeaMp0isoN was their name.”
Hacker group formed from the poison.org forum and associated with website compromises, data theft, defacement, phishing, and denial-of-service activity.
“convert his poison.org website into a hacker group called TeaMp0isoN”
“I was one of those people”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | TARGETS | English Defense League | Explicit | 109 |
| outgoing | ASSOCIATED_WITH | Anonymous | Uncertain | 109 |
| outgoing | USES | Website defacement | Explicit | 109 |
| outgoing | USES | phishing | Explicit | 109 |
| outgoing | TARGETS | BlackBerry | Explicit | 109 |
| outgoing | USES | social engineering | Explicit | 109 |
| outgoing | USES | password reset attack | Explicit | 109 |
| outgoing | USES | WordPress | Explicit | 109 |
| incoming | MEMBER_OF | Junaid Hussain | Explicit | 65 |
| incoming | MEMBER_OF | MLT | Explicit | 109 |
| incoming | MEMBER_OF | TriCk | Explicit | 109 |
| incoming | INVOLVES | Anti-Terrorist Hotline attack | Attributed | 109 |
Junaid Hussain MEMBER_OF TeaMp0isoN
Nichols identifies TeaMp0isoN as Junaid Hussain's crew.
Explicit Confidence 99% · Jonathan Nichols EP 65 Details
“one of them being Junaid Hussain’s crew. TeaMp0isoN was their name.”
MLT MEMBER_OF TeaMp0isoN
MLT joined TeaMp0isoN and was asked to co-lead the group.
Explicit Confidence 99% · MLT EP 109 Details
“I was one of those people. Then he went around to ask if I wanted to help co-lead the group with him.”
TriCk MEMBER_OF TeaMp0isoN
TriCk founded and led TeaMp0isoN after converting poison.org into the hacker group.
Explicit Confidence 98% · Jack Rhysider EP 109 Details
“TriCk wanted to take it up a notch and decided to convert his poison.org website into a hacker group called TeaMp0isoN.”
TeaMp0isoN TARGETS English Defense League
TeaMp0isoN members targeted the English Defense League, including its website and donor database.
Explicit Confidence 99% · MLT EP 109 Details
“The first major hack that I did with TriCk was the English Defense League.”
TeaMp0isoN ASSOCIATED_WITH Anonymous
TeaMp0isoN sprang out of Anonymous and was once loosely affiliated with it, but later separated itself from Anonymous.
Uncertain Confidence 94% · Jack Rhysider EP 109 Details
“TeaMp0isoN sort of sprang out of Anonymous and was once loosely affiliated with them”
TeaMp0isoN USES Website defacement
Website defacement was an early objective of TeaMp0isoN's attacks.
Explicit Confidence 99% · Jack Rhysider EP 109 Details
“Their early objectives were simply to try to deface their target websites.”
TeaMp0isoN USES phishing
TeaMp0isoN used a phishing email as the initial access method in the hotel compromise involving P. Diddy.
Explicit Confidence 99% · Jack Rhysider EP 109 Details
“to get into this hotel’s network, it started with a phishing e-mail”
TeaMp0isoN TARGETS BlackBerry
TeaMp0isoN targeted BlackBerry because it cooperated with police during the London riots by providing BBM-user information.
Explicit Confidence 98% · MLT EP 109 Details
“As a result, TriCk decided to attack BlackBerry.”
TeaMp0isoN USES social engineering
TeaMp0isoN used telephone social engineering while impersonating Google employees.
Explicit Confidence 99% · MLT EP 109 Details
“We called them all up, pretending to be from Google”
TeaMp0isoN USES password reset attack
The attackers requested Gmail password resets and persuaded employees to disclose the received security codes.
Explicit Confidence 99% · Jack Rhysider EP 109 Details
“we’d just do a password reset request on their Gmail account”
TeaMp0isoN USES WordPress
After compromising employee Gmail accounts, the attackers used the WordPress password-reset process to access the BlackBerry blog.
Explicit Confidence 98% · Jack Rhysider EP 109 Details
“this BlackBerry blog was just a WordPress site”
Anti-Terrorist Hotline attack INVOLVES TeaMp0isoN
TeaMp0isoN was reported as having jammed the UK counter-terrorism hotline with computer-generated calls.
Attributed Confidence 96% · Host6 EP 109 Details
“TeaMp0isoN is an anarchist, hacktivist group, and it began by jamming the UK’s counter-terrorism hotline”