Episode
25 May 2021 Official episode · Official transcript
hacktivism cybercrime investigative
The episode examines Kik’s anonymous chat platform, its modified Android clients and protocol-level abuse, moderation failures, child sexual abuse material, and related law-enforcement and platform-safety issues.
Topics: Anonymous account registration and abuse of anonymous messaging platforms, Modified Android APKs and unofficial mobile clients, XMPP and XML stanza processing, Unauthorized chat-room administrator privileges, Read-receipt manipulation, Chat-room flooding, spam, and denial-of-service-style client crashes, Zero-day exploitation in a messaging client, Phishing links and IP-address harvesting, Doxxing and ISP-information collection, Image hashing and PhotoDNA-based content detection, Child sexual abuse material reporting and moderation, DMCA takedown procedures, Platform liability and Section 230, COPPA and child privacy, Database exposure and insecure public data stores, Law-enforcement Cyber Tip Line reporting, App-store moderation and content-policy enforcement
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Kik OPERATED_BY Kik Interactive
Kik was operated by the company called Kik Interactive before its sale to MediaLab AI.
Explicit Confidence 96% · Jack Rhysider EP 93 Details
“By this point, the company was called Kik Interactive and they had a whole team of people working there.”
Kik Interactive ASSOCIATED_WITH Tencent
Tencent invested $50 million in Kik Interactive in an effort to make Kik the WeChat of the West.
Explicit Confidence 98% · Jack Rhysider EP 93 Details
“the Chinese company Tencent invested 50 million dollars into Kik, trying to make it the WeChat of the West”
Kin DEVELOPED_BY Kik Interactive
Kik Interactive created its own cryptocurrency called Kin.
Explicit Confidence 95% · Jack Rhysider EP 93 Details
“decided to make their own cryptocoin called Kin”
Kik SEC lawsuit INVOLVES Securities and Exchange Commission
The SEC filed the lawsuit against Kik and Kin, alleging securities violations.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“in 2019 the SEC filed suit against Kik and Kin, alleging securities violations”
Kik SEC lawsuit INVOLVES Kik Interactive
The SEC lawsuit involved Kik Interactive.
Explicit Confidence 97% · Jack Rhysider EP 93 Details
“the SEC filed suit against Kik and Kin”
Kik SEC lawsuit INVOLVES Kin
The SEC lawsuit involved Kin, with the SEC alleging that it was treated like a security when used to raise money for the company.
Explicit Confidence 98% · Jack Rhysider EP 93 Details
“the SEC filed suit against Kik and Kin, alleging securities violations”
Kin Foundation ASSOCIATED_WITH Kin
Kik Interactive created a separate Kin Foundation focused on Kin.
Explicit Confidence 98% · Jack Rhysider EP 93 Details
“they made their own separate entity called the Kin Foundation which just focused on Kin”
Kik OPERATED_BY MediaLab AI
MediaLab AI bought Kik and became its owner after Kik Interactive announced the app would be shut down.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“They offered to buy Kik, so it was sold to MediaLab”
Kik uses XMPP to send messages between users.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“Kik uses a protocol called XMPP which sends messages from one user to another”
XMPP uses XML to encode and format messages.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“XMPP uses XML to encode and format the actual messages being sent”
modified Kik client USES read-receipt bypass
Modified Kik clients could turn off read receipts or make read messages appear unread to other users.
Explicit Confidence 98% · Azrael EP 93 Details
“you could turn off your read receipts and see who was reading your messages”
modified Kik client USES XML stanza injection
Azrael's custom Kik client could send raw XML stanzas, injecting code into chats for other Kik clients to process.
Explicit Confidence 98% · Azrael EP 93 Details
“I can send raw XML files which are stanzas”
modified Kik client USES chat-room privilege escalation
XML stanza injection could cause a user to be given chat-room administrator ability.
Explicit Confidence 99% · Azrael EP 93 Details
“this user was just given admin. Then you have admin ability”
crash codes EXPLOITS zero-day exploit
Crash codes relied on actual zero-day exploits in the Kik system to force-close the app when users viewed the code.
Explicit Confidence 99% · Azrael EP 93 Details
“Crash codes rely on actual zero-day exploits within the Kik system which will force-close your app”
crash codes AFFECTS Kik
Crash codes could force-close the Kik app when the code was viewed.
Explicit Confidence 98% · Azrael EP 93 Details
“which will force-close your app if you look at the code”
QOS attack code AFFECTS Kik
QOS attack code packed as much content as possible into a single chat bubble as part of attacks on Kik chats.
Explicit Confidence 94% · Azrael EP 93 Details
“There’s a QOS attack code which is literally just as much as you can pack into a single chat bubble”
Azrael joined the Raindrop clan, which he described as focused on anti-toxicity raids.
Explicit Confidence 99% · Azrael EP 93 Details
“the clan I joined at the time was called Raindrop”
Azrael joined the Xensec clan, which focused on the pedophilia problem on Kik.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“he joined a new clan called Xensec”
“Xensec focused solely on the pedophilia problem”
Azrael USES modified Kik client
Azrael used modified Kik clients to defend and raid chat rooms.
Explicit Confidence 97% · Azrael EP 93 Details
“I kinda started spotting these people that were using modified APKs”
Azrael used a deceptive message and an injected stanza to get a suspected pedophile to click a link, which Jack characterized as a classic phishing scheme.
Explicit Confidence 98% · Jack Rhysider EP 93 Details
“So, a classic phishing scheme”
Azrael USES IP address harvesting
Azrael used an injected link or stanza to collect a target's IP address and derive ISP information.
Explicit Confidence 99% · Azrael EP 93 Details
“it basically shows up on the receiving end as an invisible picture. Then they’re like, why isn’t this loading? They click it; I have their IP”
Jack characterized Azrael's collection and disclosure of ISP information about targets as doxxing.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“what he’s doing is phishing people and doxxing them”
Kik partnered with Microsoft to test PhotoDNA for scanning images against known child-abuse-image hashes; the episode is uncertain about whether it remained in use.
Attributed Confidence 96% · Jack Rhysider EP 93 Details
“In 2015, Kik partnered with Microsoft to test Microsoft’s PhotoDNA service”
PhotoDNA USES image hashing
PhotoDNA uses a database of known child-abuse-image hashes to identify matching images.
Attributed Confidence 98% · Jack Rhysider EP 93 Details
“what Microsoft has is a database of known child porn image hashes”
Cyber Tip Line OPERATED_BY National Center for Missing and Exploited Children
The Cyber Tip Line is run by the National Center for Missing and Exploited Children.
Explicit Confidence 99% · Jack Rhysider EP 93 Details
“They run something called the Cyber Tip Line”
Badass Army USES Digital Millennium Copyright Act
Badass Army normally used DMCA notices to request removal of non-consensually shared nude images.
Explicit Confidence 99% · Katelyn Bowden EP 93 Details
“With Badass, we normally would use a DMCA”
Kik ASSOCIATED_WITH Child Sexual Abuse Material
The episode presents Kik as having a large and persistent CSAM problem, while also noting uncertainty about the extent of Kik's moderation and enforcement.
Uncertain Confidence 95% · Jack Rhysider EP 93 Details
“Kik Chat App Involved in 1,100 Child Abuse Cases”
“Kik has a very big problem with child abuse”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:04:45.749306+00:00