Luan Barbosa SAME_AS USDoD
Jack identifies the hacker known as USDoD as Luan Barbosa.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“his name was Luan Barbosa”
“USDoD, or Luan”
Threat actor
threat_actor:usdod
Also: DoD, USDoD
Hacker name used by Luan Barbosa, associated in the episode with breaches, data theft, impersonation, and data sales.
Hacker name used by Luan Barbosa, associated in the episode with breaches, data theft, impersonation, and data sales.
“the account name is USDoD”
“whenever I say USDoD in this story, I’m always talking about this hacker from Brazil.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ASSOCIATED_WITH | Brazil | Explicit | 177 |
| outgoing | USES | social engineering | Explicit | 177 |
| outgoing | USES | PEO exploit | Explicit | 177 |
| outgoing | TARGETS | Department of Defense | Explicit | 177 |
| outgoing | TARGETS | InfraGard | Explicit | 177 |
| outgoing | USES | data scraping | Explicit | 177 |
| outgoing | TARGETS | NATO | Explicit | 177 |
| outgoing | TARGETS | Airbus | Explicit | 177 |
| outgoing | COMPROMISES | National Public Data | Explicit | 177 |
| outgoing | USES | credential reuse | Explicit | 177 |
| incoming | SAME_AS | Luan Barbosa | Explicit | 177 |
| incoming | ATTRIBUTED_TO | National Public Data breach | Explicit | 177 |
Luan Barbosa SAME_AS USDoD
Jack identifies the hacker known as USDoD as Luan Barbosa.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“his name was Luan Barbosa”
“USDoD, or Luan”
USDoD is described as a hacker from Brazil and as living in Brazil in the account attributed to him.
Explicit Confidence 98% · Jack Rhysider EP 177 Details
“this hacker from Brazil”
“the hacker known as USDoD was living in Brazil”
USDoD USES social engineering
USDoD tried to gain access to the PEO network by impersonating and socially engineering one of its developers.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“He tried getting access through the developer using social engineering techniques”
USDoD USES PEO exploit
USDoD accepted a job to help collect military data and worked with Russian hackers in an operation involving an exploit for PEO.
Explicit Confidence 90% · Jack Rhysider EP 177 Details
“USDoD accepted the job”
“USDoD discovered that a way into this network”
USDoD TARGETS Department of Defense
USDoD breached the Department of Defense and published military emails and passwords.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“That is how he got the hacker name USDoD, by breaching the Department of Defense”
USDoD targeted InfraGard, the FBI-linked system for reporting incidents.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“His next target was InfraGard.”
“that was the site that USDoD was trying to attack”
USDoD USES data scraping
USDoD used a Python script to retrieve InfraGard members' contact information through the site's API.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“USDoD asked a friend to write him a Python script to grab the data”
“he used it to steal every InfraGard member’s contact information”
USDoD or Luan is described as having broken into a cybersecurity defense center at NATO.
Explicit Confidence 98% · Jack Rhysider EP 177 Details
“Luan, broke into Cybersecurity Defense Center at NATO”
USDoD or Luan is described as having breached Airbus and its vendors.
Explicit Confidence 98% · Jack Rhysider EP 177 Details
“the aerospace company Airbus and their 3,000 vendors”
National Public Data breach ATTRIBUTED_TO USDoD
The breach is attributed in the episode to Luan, operating as USDoD, who took the National Public Data records and posted them for sale.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“Luan took everything, 2.9 billion lines of data, 277 gigabytes worth”
“he posts it for sale online as USDoD”
USDoD COMPROMISES National Public Data
USDoD gained access to National Public Data after reusing credentials that first enabled access to Records Check.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“Sal reused passwords, which allowed Luan to log in to National Public Data”
USDoD USES credential reuse
USDoD exploited Sal's reused passwords to move from Records Check into National Public Data.
Explicit Confidence 99% · Jack Rhysider EP 177 Details
“Sal reused passwords, which allowed Luan to log in to National Public Data”