Revenge: He Could Wipe 2,947 Devices With One Risky Click🎙Darknet Diaries Ep. 113: Adam
Vložit
- čas přidán 31. 01. 2024
- Adam got a great job doing IT work at a school. He liked it, and felt like he was part of the team. But when a bad decision from his past caught up with him, the old admin passwords he used to know became more tempting than ever.
Visit darknetdiaries.com/episode/113/ for a list of sources, full transcripts, and to listen to all episodes. - Věda a technologie
Multiple process failures allowed the Insider Threat to do extreme damage:
1. Improper (no) offboarding process
2. Poor Elevated Privilege management process: Principle of Least Access
3. credentials stored in plaintext on a device
4. weak, formulaic password generation process allowed successful guesses and interpolation
5. No 3-2-1 backup process, no off-site, disconnected backups
6. probably no disaster recovery nor continuity of business process either, the recovery was an unrehearsed surprise
The Academy's systems survived until they met their first disgruntled junior employee. Total reliance on the good faith of people.
Great episode as per usual. Thanks for spoiling us. I hope Adam is doing well; he's had a hard go of things.
Adam did them a favor
This felt like Adam is a sociopath and is trying to justify it being normal to do this simply out of spite.
Lots of these episodes are like that
All the same, the society that I want to live in affords folks like Adam every off-ramp and ladder of redemption up out of "the life," where all they have to do is grab it and hold on.
Hey Jack, You might not ever read this, however, I just want to thank you for your compassion and understanding when interviewing people. There are so many judgements and paths that could be followed, but you chose the path of interest and learning, and lead us on that path too... As an Australian, I can confirm it is a difficult place to grow up with limited school opportunities... Your handling of this journey is deeply compassionate. So many don't make it through. Thank you.
I agree totally with this. It is really hard to be truly objective and non-judgmental in cases like this; especially where innocent people have been affected by losing their personal data, memories etc.. It's bad enough when this happens due to a hard disk crash where one doesn't have an up-to-date backup (and preferably one or two off-site as well). .. that command Brodie Robertson uses in his outros also springs to mind.
That's well said. I hope he does read this
Just want to mention as an Australian there is GREAT education available in Australia we have some of the best education in the world however, we do also have a prevalent bullying issue in most schools. Not all schools but I would say overall it's definitely a wide spread issue.
the irony: he wasn't the one making any trouble but he was the one sent to the behaving school
the moral of the story is to wait for the police report before you hire someone
Hahaha true
What on Earth was he thinking when he went on another rampage after just being let out of custody for his first rampage? Not that I had much to begin with, but I had zero sympathy for him after that.
Person gets fired for having a criminal record.
Person proceeds to do criminal things.
Looks like the company made the right call.
Pretty sure the right call would have been to let him down before hiring him and letting him in
@@benroberts127 yeah, "they fired me kinda dickishly after a month", is not a valid reason for destroying thousands of devices and an entire network. Pretty sure of the 3000 odd devices he wiped, less than 5 belonged to people who decided to fire him. Most of them were people just like him. Dude's a criminal, firing him was definitely the right call, and he deserves to be in prison.
@@PlasteredDragon Oh, they fired me for having a criminal record? I'll show them by expanding my criminal record.
@@NicholasAmCuben😂😂
Another illustration that not all who work in IT have basic cyber security knowledge.
I was just binge listening to old Darknet diaries episodes and open CZcams to see "1 minute ago" on a NEW episode? Hyped! Thanks, Jack
Edit- ik it's not a new episode. Still excited
real
There are actually 141 current episodes
This is 113#
Yah thats amazing xd
This isn't a new episode dude
A lot of companies have gone bankrupt when their systems were wiped like that ... That likely cost them Millions of dollars overall .... Holy hell you destroyed that.
Bro! So happy! I’m working 3rd shift, you just made my day! Thanks for your great content!
I remember getting in the cookie jar when I was about 4 years old and having too many. 😊 It is a good memory I never have forgotten
Moral of the story, don't be like Adam.
and from a employers perspective, moral of the story is not to employ those with a criminal record lol
How about *Moral of the story:* don't treat others in bad faith or you might just get clapped back
Moral story use seed box and anonymity vpn in public wifi.
Moral of the story: hide your ip address
The moral of the story is that IF you decide to be a dick to your former employers, plan accordingly so you don't get caught . Adam got what he deserved because he couldn't be bothered to cover his tracks properly and has now proven to future employers that he's an IT liability to hire . So congratulations, Adam, you are now a convicted cyber criminal with no way forward as an IT hire .
21 months of jail time is hardly "getting what he deserved". He deserves worse.
I have my junior info sec analyst interview in a few hours. Will update this comment after.
Good luck stranger.
@@100daysofmeh thank you stranger
@@Grasimeehow'd it go brody
@@diamondsprince it went good! Just waiting to hear back
let us know how it goes@@Grasimee
Thanks Jack as always. We got your back.
Jack .. best show on the web. I always get excited when a new video shows up. Thank you and your team. Keep up the great content.
this guy sounds so nice but his story exposes that he legitimately has some kind of psychological disorder, narcissism maybe. He brushes the attacks off as panicked but it sounds like more an impulsive rage.
Should follow up and see what he's up to now that he's out?
He admits he was in a gang. Possibly anti social
I’m out. I’ve approached jack no response yet to see if he wants to follow up. I used my time wisely inside. In cyber security now. Part time.
@@Adamvp1ltd interesting! Were you honest about your past convictions and still got the new job or did you hide it?
Everything was declared to them and I had to undergo an enhanced DBS to confirm I wasn't hiding anything.@@NiklasVWWV
yep, and have my own business now. Jack pinned my update as a comment@@NiklasVWWV
There are certainly more things IT related that could get you into trouble in the UK than here in the US, considering the very broad wording of the Computer Misuse Act.
I'm not sure about that, because our US leader in the 80s did something similar and really put the hammer done on computer crimes, expanding what's considered malice. That's why sening too many packets to your neighbor could get you up to 10 years. I guess the UK isn't too far behind but the rest of Europe is far more lenient.
Thanks Jack for sharing these amazing stories!!
i wake up Thursday mornings just to listen to you jack like always , love from Ethiopia
Literally just scrolling through realising Ive watched every video, then this pops up.
Have learnt a lot Jack, thank.
Apparently he was arrested for fraud back in his home country, twice.
Its hard to say whats accurate here, the news articles or he himself 🤔
His story is pretty easy to find, he got a 21 month sentence, half of which hed be out on license which is essentially probation/parole.
Great episode Jack! Makes me wonder how often this happens that doesn't cause such a disruption as to make it on the news or a podcast. I can't even imagine how many "skiddies" get in over their head's after watching "too many" Hammond, Bombal, Chuck, Mentor, Hak videos and try to *test and explore* with their newly discovered skills and quickly get in too deep.
I'm so happy there's a new episode to listen to this morning, this just made my workday way better
There's no requirement to ever 'change passwords'.
There is a requirement to lock this guy out as soon as he's left and not share passwords.
HI Jack! Thanks for the awesome stories!
great story as usual, thanks jack
It's kind of nuts because psychologically his whole life was impacted by being bullied as a youth.
No its just an excuse man getting bullied 10 years ago doesnt justify these actions. Bad people just want to feel better about themselves.
@@chadgamer6942 it doesnt justify obv, but it gives clues as to why their brains work a certain way and thus make decisions that they do. Still should be treated as many times its fixable, but no its not 'just an excuse'
Being bullied as a youth doesn't make one a sociopath who fails to feel any sort of remorse for what they did. Especially when they make a massive mistake and then proceed to do it again. AND LIE ABOUT IT.
This Adam guy is a real turkey.
Not a nice person imho
perfect example of why you shouldn't hire criminals.
Another great episode !
That dopameme gag was brutal.
This a public service announcement reminding everyone to use Tor. It is better to be safe than sorry.
This person is a narcissist
Wiping a bunch of random citizens phones is a serious piece of shit move. Wow.
Yes!!!! Let's go!!!! Wake up to a long cleetus sick week vid, whistling diesel and now darknet!! Today is gunna be a good day!
I ignore Cleetus for about a minute and he goes and gets his Sikorsky Black Hawk type rating. LOL
This really is a missed opportunity for a NordVPN sponsorship.
nordvpn would just be one more step before isp
Nordvpn would give them all your data if you are involved in criminal activity😂 VPN providers aren't safe at all
@@aboringdyst0pia go watch the Bombal-Yen interview.
@@aboringdyst0pia VPN providers are safe, it's the criminal activity and fact that they, too, adhere to the law and will provide details if subpeona'd.
Thanks Captain Jack, another interesting story....cheers.
Wait this came out just now? But was recorded in 2021?
I love your videos thank u so much jack
If i knew the passwords, i would just sell them to some1 else on internet on black market. Then wipe any info of talking to that person. Since you dont log in into a network, your IP will not be shown there.
Update no reason and new Darknet Diaries episode! What a good night it is turning out to be! Thanks Jack
Never been this early for a new drop. 😊
Moral of the story - don't piss off IT.
thank you
Woohoooo .. he found another gr8 story!
The most devious click
That cookie story though... Jack is truly a criminal mastermind just like the rest of his guests.
Jack is bacc!
He literally said that he spent the money and the director said he could pay it back That’s stealing!!!
With the sudden realization that he got in, and didn't cover tracks, I wonder if he could have come forward and say I do security testing and was able to traverse the network easily and here are a set of findings and recommendations. Yes he did it without being asked, and they could call the police and go after him, however, I think they would be more grateful, and if he did get caught, he would be worse off.
Now to un pause and see what happened
That’s what a non-mentally-deranged person would do. That’s not what we’re dealing with here, unfortunately.
You cant do that unsolicited. Just typing in the password as an unauthorized user is just as bad an offense as wiping it out short of the monetary penalties for paying for a full rebuild of the network.
oh boy at first glance i read it as: "is just as bad an offense as {Whipping It Out}" and thought "i'm not so sure" until i realized my dirty mind's mistake. @@mattnsac
@@mattnsac yeah if you just log in and stop, or turn off and hope no one finds it, yeah. I know attempting to login is just as serious as breaking in, but a smaller college like this, they may just go, okay thank you and change passwords and change security. A fortune 500 company, that's a different story. But going further and start wiping out computers and changing passwords and destroying the network, now nothing will save you from that. Your screwed.
That's an un-crossable line now.
yeahhh boizzz lets gooooo!
video starts at 2:00 as always
Great channel and story like always,whoops marketing, apologise for that, all ❤ 😬
his gang story was 🧢
say good bye to any job with computers/access to anything of importance
I know what I'm listening to on today's run
Omg haha the cookie thing 😂 i did that exsact thing with a chocolate pie. Except I ate all Except one slice and i cane up with a genius idea. I put the pan on the floor and ran off, as the dog scarfed down that remaining slice and my mom walked in just in time to see her eating it haha totally got away with it
Is this a reupload, feel like I've heard this episode before.
You sound like my brother I feel like I heard that story before h7h😊
Dopameme, OOF!
The school should have done a criminal background check sooner, but not allowing him to work there was the right thing. They have a duty to protect their students, and an assault/robbery on your record is a red flag they shouldn't overlook, no matter if you've learned from it.
Change all the pw’s and lock everyone out of the cloud portal and internal school network. Then hold it for ransom
I've listened to every episode at least x4 - x30 each,.....shit sum of them x100.. i lisyen listen to him when i sleep every night if i could...
Should have his own xfm radio show!!
I think you need to find a new hobby if you're listening to anything, that isn't music, that often.
That is one of my hobbies showing Darknet diaries to any one that will watch them so I'm a sharing the knowledge of jack. And hopefully getting him a few more listeners
Only 21 months for literally destroying virtual property and basically removing an academy? Fuck our systems suck.
And yeah, I'd gladly hire someone who was good at their job, but some nut job like this guy who might fly off the handle because someone slights him in any way. Especially when he lies the 2nd time he destroys a network.
Personally, for someone like this guy, there is not enough rehab in the world to bring him back to a good morale stance. I think this would be more of a "do not pass go, do not collect $200, do not ever play this game again"... Aka the death sentence. No need to waste time putting him in jail.
I think we can all relate to that intro story
How far back do you have these episodes stacked up? This guy was supposed to get out last year. Maybe you never got a follow up and are pressed for content due to research? Either way I am glad to have the episode and even happier you are trying to start a digital privacy movement.
Yeah i got confused because it was a recent upload but the end it sounds like it was recorded before he was supposed to be released in 2023
I am guessing Jack intentionally held onto this one to maybe get us an update, and that he could never get into contact.
Otherwise I feel like a lot of youtubers may keep a couple vids on hold. Saving some content for a rainy day.
Update was provided to jack, today I’ve offered him a catch up on this and maybe another Ep about it. Waiting his response. I work in Cyber Sec now part time but most of what I done inside was helping offenders/IT.
@@Adamvp1ltd Proof that you helped people and that you actually work in Cyber Sec part time? And what do you do in your free time? Also why only part time?
Was that a juvenile criminal record he got fired for?
15:00 I've had the domain admin login for all the schools in my town sence 6th grade, It didn't really seem like a big deal and all the IT people knew it as well some teachers. Is this normal or did my town just have super poor security?
Super poor security.
@@patrick764Yeah, guess the IT guy just got tired of typing in my password everytime i needed to install something
@DarknetDiaries Any word on if Adam has been released and how he is doing? 🤔
I guess Jack was never able to get an update on what happened to this person.
He did , directly from me.
It would only fully wipe the device if it was fully managed. These would be user enrolled so only wipe company data. This is something I use every day. You can remove the passcode on an iPhone though which is interesting.
If my kid did that I would probably forget too
What command did he run? asking for a friend!
Dopa-meme, lol.
mistakes were made, but the Fates are like that.
i really feel for this Adam as he kept getting screwed over by people. The academy did not know basics of cyber security.
Uh what i still dont understand is why he was on his local ip address especially when he was working in the it field.
poor guy :/
Hey Jack I am trying to reach out to you personally now...
Okay I'm confused. I understood Jack's story about going all in on the cookie theft when he was a child. I thought Adam was covering his tracks by wiping everything. But there were firewall logs? So was it in for a penny in for a pound? They're going to catch me so I might as well do as much damage as possible? I'm tech challenged so be gentle
essentially my thoughts at the time, yes. Jack pinned my update as a comment
He wiped his tracks on the computers, but you can't wipe the firewall logs if those are stored separately, which it sounds like they were. Or he was too naive, still, to know to look for them.
@@Adamvp1ltd ok thanks so much for clarifying.
35:11 and you will know my name as The Lord....
I guessing your silence can be used against you in the uk
>He’s due to be released sometime in 2023
Then where's the update?! It's 2024 now.
Jack pinned my update as a comment
Wouldn’t routing through the onion net protect him? Why didn’t he do that?
the story makes it seem like he didn't set out or plan to do what he did, he was just poking around and got in too deep before he realized what he done
ahh nevermind just heard the rest and he did it again, what a dumbass
Of course we use 1 local password.. You can't keep changing it... There is thousands of computers on a network and all it takes is one network adapter fault and you can't actually log in via domain admin account so you need the local admin... If it had a custom password we would have to maintain a spreadsheet with those and that is a vulnerability in its self
24:00
Ok I understand that technically this is privilege escalation, but it isnt truly the meaning of privilege escalation.
Usually a hack would be called this when an exploit or something similar is used from one user to a ussr wirh higher privileges, not just resetting a user with higher privileges.
Disappointing to here you describe this as privilege escalation.
I know the average viewer doesnt realize this, but I'd still recommend you accurately describe things.
What a haxor. Incredible. The great uninstaller
Am I tripping or have I heard this before 🤔 this must be new to CZcams not Apple podcast rt???
Wait this was posted one day ago and it's 2024 so is the guy out of jail or what
Jack pinned my update as a comment
I wonder how he is now.
Jack pinned my update as a comment
Old episode.......🤔😩✌️
Anyone else catch the Pulp Fiction reference?
shout out Runescape best mmorpg that will ever exist
Jack why are You reposting old episodes as new one?
For CZcams obviously
adam is a noob. didnt even use a vpn
good story
👍
Testing a post?
I feel sorry for "Adam". Such a nice and brilliant fellow, with such an unfortunate serie's of trouble while growing up :/ I just hope those who did him wrong will reap what they sow and go to jail or get inspected by the law. If that company does farlow-scam's, human's tend to do misstake's, there should be evidence about it. Hopefully someone will have a hidden recorder and record it all and show it to a judge. Then "Adam" can feel sweet revenge, without lifting a finger :)