Episode

EP 162 — Hieu

05 August 2025 Official episode · Official transcript

black hat cybercrime dark web carding

Hieu Minh Ngo describes hacking e-commerce sites, obtaining and reselling payment-card and U.S. identity data through data brokers, his prosecution under the CFAA, and his later work assisting Vietnamese cybercrime investigations.

Topics: SQL injection against e-commerce and data-broker web applications, Google dorking and automated vulnerability scanning, Cross-site scripting and file-upload vulnerabilities, Phishing and malware-based compromise of private investigators, Data-broker aggregation and identity-data resale, API-based identity-data access, Payment-card theft and storage failures, Chip dumping and online-payment laundering, Identity theft and tax-refund fraud, Computer Fraud and Abuse Act prosecution, Privacy, surveillance, and third-party data doctrine, Credential theft and account impersonation

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (40)

Claims (20)

Qualified statements from this episode, not graph facts.

hieupc.com DEVELOPED_BY Hieu Minh Ngo

Hieu says he built his first website, hieupc.com.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I built my first website, hieupc.com”

Hieu Minh Ngo · offsets 2518–2554

Hieu Minh Ngo USES Google dorking

Hieu searched Google using Google dorks to find vulnerable websites.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I searched on Google with those keywords, some of the Google dork”

Hieu Minh Ngo · offsets 8565–8630

Hieu Minh Ngo EXPLOITS SQL injection vulnerability

Hieu exploited SQL injection vulnerabilities in e-commerce sites and data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“that website, it got a SQL injection vulnerability”

Hieu Minh Ngo · offsets 9365–9415

“First; SQL injection”

Hieu Minh Ngo · offsets 31056–31076

Hieu Minh Ngo EXPLOITS file upload vulnerabilities

Hieu says he used file upload vulnerabilities against LocatePLUS and MicroBilt.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“The second one, the file upload vulnerabilities”

Hieu Minh Ngo · offsets 31078–31125

Hieu Minh Ngo USES cross-site scripting

Hieu says he used cross-site scripting when attacking the data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“and the third one, cross-site scripting”

Hieu Minh Ngo · offsets 31127–31166

Hieu Minh Ngo USES OSINT

Hieu used OSINT to compile a list of U.S. data brokers.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“doing lots of OSINT to get me a list of all the data brokers in the US”

Hieu Minh Ngo · offsets 22810–22880

Hieu Minh Ngo USES chip dumping

The episode describes Hieu transferring stolen poker chips between accounts to launder money; Jack identifies this as chip dumping.

Explicit Confidence 97% · Jack Rhysider EP 162 Details

“This technique is called chip dumping”

Jack Rhysider · offsets 11497–11534

Hieu Minh Ngo USES phishing

Hieu used phishing emails to compromise private investigators' computers and impersonate them.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I used that to do phishing. I was phishing them to a malware”

Hieu Minh Ngo · offsets 35876–35936

Hieu Minh Ngo USES Malware

Hieu used malware delivered through phishing to gain access to a private investigator's computer.

Explicit Confidence 98% · Hieu Minh Ngo EP 162 Details

“I was phishing them to a malware so I can — got into the computer”

Hieu Minh Ngo · offsets 35904–35969

Hieu Minh Ngo USES Liberty Reserve

Hieu used Liberty Reserve to receive payments for identity searches and launder proceeds.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“Back then, I didn’t use Bitcoin. We used Liberty Reserve”

Hieu Minh Ngo · offsets 33732–33788

Hieu Minh Ngo USES identity theft

Hieu sold U.S. identities and acknowledged that his service enabled identity theft-related activity.

Explicit Confidence 90% · Jack Rhysider EP 162 Details

“Stealing identities and selling that is far less of a crime”

Jack Rhysider · offsets 21927–21986

“I kinda like I hurt and harmed so many people’s lives”

Jack Rhysider · offsets 58800–58865

Hieu Minh Ngo DEVELOPED_BY Hieu Minh Ngo

Hieu says he built a website that sold identity lookups; the episode later identifies its successive domains as ussearching.info, superget.info, and findget.me. This self-link is not appropriate; the supported links are represented below as website-to-person claims.

Uncertain Direction flagged Confidence 10% · Hieu Minh Ngo EP 162 Details

“Then I built a website and then I took that website”

Hieu Minh Ngo · offsets 33139–33190

ussearching.info DEVELOPED_BY Hieu Minh Ngo

The episode identifies ussearching.info as the first domain of the website Hieu built to sell identity searches.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“At first that website’s called ussearching.info”

Hieu Minh Ngo · offsets 44683–44730

superget.info DEVELOPED_BY Hieu Minh Ngo

Hieu says the identity-search website was later operated under the superget.info domain.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“then eventually superget.info and findget.me”

Hieu Minh Ngo · offsets 44735–44779

findget.me DEVELOPED_BY Hieu Minh Ngo

Hieu says the identity-search website was later operated under the findget.me domain.

Derived Confidence 90% · Hieu Minh Ngo EP 162 Details

“then eventually superget.info and findget.me”

Hieu Minh Ngo · offsets 44735–44779

ussearching.info USES API

The website allowed users to search Court Ventures data through an API.

Explicit Confidence 99% · Jack Rhysider EP 162 Details

“users could search Court Venture database through the API”

Jack Rhysider · offsets 44618–44675

ussearching.info USES Court Ventures

The website used the Court Ventures database as its identity-search data source.

Explicit Confidence 99% · Jack Rhysider EP 162 Details

“users could search Court Venture database through the API”

Jack Rhysider · offsets 44618–44675

Hieu Minh Ngo MEMBER_OF National Cyber Security Center

After prison, Hieu says he worked for Vietnam’s National Cyber Security Center for four years.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“I’ve been working there for four years”

Hieu Minh Ngo · offsets 78352–78390

Court Ventures ASSOCIATED_WITH Experian

Hieu says Court Ventures was acquired by Experian; Jack places the acquisition in December 2011.

Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details

“Eventually Court Venture, right, they got acquired by the Experian”

Hieu Minh Ngo · offsets 47547–47613

“In December 2011, Experian bought Court Ventures”

Jack Rhysider · offsets 47638–47686

Equifax breach COMPROMISES Equifax

Jack refers to Equifax as an example of a data broker that was breached.

Explicit Confidence 99% · Jack Rhysider EP 162 Details

“The biggest one is when Equifax got breached”

Jack Rhysider · offsets 74959–75003

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:44:19.615690+00:00