back to indexBrett Johnson: US Most Wanted Cybercriminal | Lex Fridman Podcast #272
Chapters
0:0 Introduction
3:15 Early years
37:32 Phishing and social engineering
55:36 SolarWinds cyberattack
61:23 Future social engineering fears
64:4 Early cybercrimes
76:38 Cybercrime entrepreneurship
80:6 ShadowCrew
111:10 Dark web
119:56 ShadowCrew arrested
131:55 Cybercrime
137:2 Love
169:6 Prison
197:18 Life after prison
219:6 Advice for young people
220:30 Hope for the future
223:59 Meaning of life
00:00:00.000 |
I was on the run for four months, stole $600,000. 00:00:24.120 |
That was my real name with the US Most Wanted beside of it. 00:00:26.480 |
Nobody knew my real name in that environment at all, 00:00:30.280 |
And it was talking about me being part of the Secret Service, 00:00:39.400 |
- Oh yeah, we're gonna get this son of a bitch. 00:00:41.760 |
- The following is a conversation with Brett Johnson, 00:00:47.840 |
who built the first organized cyber crime community 00:00:56.200 |
He's referred to by the United States Secret Service 00:01:02.040 |
He has been the central figure in the cyber crime world 00:01:10.280 |
before being convicted of 39 felonies for cyber crime, 00:01:18.960 |
and now is helping people understand and fight cyber crime. 00:01:24.320 |
This was a raw, honest, emotional, and real episode. 00:01:29.320 |
Brett has caused a lot of pain to a lot of people, 00:01:32.880 |
and yet his own story is full of trauma and pain, 00:01:43.400 |
and I will talk to people who have served time in prison, 00:01:46.760 |
and perhaps people who currently are in prison. 00:02:01.920 |
because if you close your heart to the other person, 00:02:04.640 |
you'll never fully understand their mind and their story. 00:02:12.240 |
to where the conversation reveals nothing honest or real. 00:02:16.520 |
This requires skill and willingness to take the risk. 00:02:34.600 |
the particular characteristics of their temporary 00:03:00.360 |
of being human in a complicated and dangerous world. 00:03:14.200 |
You were convicted of 39 felonies for cybercrime 00:03:24.680 |
You built the first organized cybercrime community 00:03:32.860 |
And for all this, the US intelligence service 00:03:45.300 |
- My life of crime begins when I'm 10 years old. 00:03:49.440 |
I mean, you were probably playing with robots 00:03:55.400 |
getting involved with sports, everything else. 00:04:04.140 |
it's like parts of Texas, parts of Louisiana, 00:04:08.340 |
that if you're not fortunate enough to have a job, 00:04:11.280 |
you may be involved in a scam, hustle, fraud, 00:04:25.440 |
she's stealing a 108,000 pound Caterpillar D9 bulldozer, 00:04:31.240 |
You know, at another point, she's taking a slip and fall 00:04:33.240 |
in a convenience store trying to sue the owner. 00:04:35.640 |
We had a neighbor she acted as a pimp for at one point. 00:04:50.080 |
Her name was Debbie, and my mom used to sell her out. 00:04:55.440 |
and my mom would find men for her to sleep with for cash, 00:05:00.560 |
- So it sounds like she diversified the methodologies 00:05:10.680 |
- You know, we see that a lot with cyber criminals, 00:05:14.160 |
you know, that sense of being that entrepreneur. 00:05:16.680 |
- So what was the motivation, you think, for her? 00:05:22.640 |
Is it basically the rush of playing with the system 00:05:27.080 |
or being able to know the rules and break the rules 00:05:36.900 |
So my mom was the individual, she's still alive. 00:05:44.440 |
She wanted to know how far she could abuse you 00:05:50.200 |
So, and that was with every relationship she's ever had. 00:05:53.920 |
She would cheat on the men she was involved with. 00:05:56.120 |
She would abuse the, her children, me and Denise. 00:06:07.440 |
I mean, she used to beat me and Denise with belt buckles, 00:06:19.160 |
I think that it may have been the part where she accused me 00:06:24.160 |
of stealing her marijuana, but she was hitting me and Denise. 00:06:29.240 |
We were living in a single wide trailer at that point. 00:06:33.840 |
We were on the bed trying to get away from it. 00:06:35.920 |
And Denise kicks her through a closet is what happens. 00:06:45.720 |
And that was the last time that mom hit us at that point. 00:06:57.120 |
You're extremely charismatic and fun and jolly 00:07:03.160 |
But, you know, if we look at that kind of life, 00:07:06.760 |
there's darkness there, there's a struggle there. 00:07:16.480 |
If you go back to the mind of the kid you were 00:07:24.200 |
Was there things like depression, self-doubt, 00:07:37.880 |
Now it becomes exciting when I start being involved 00:07:42.320 |
But back then it was simply a means to an end, 00:07:58.360 |
But his issue was, is he loved my mom so much, 00:08:04.840 |
So if she wanted to do something, commit crime, 00:08:22.060 |
"I want you to die, blah, blah, blah, blah, blah." 00:08:36.360 |
My sister Denise is a year younger than I am. 00:08:44.940 |
My dad, I was with my dad, my sister was with my mother, 00:08:49.080 |
because that's that Eastern Kentucky mentality. 00:08:50.800 |
You know, men stay with men, women stay with women. 00:08:57.880 |
Me and my dad, we were living in an apartment. 00:09:12.160 |
I woke up one night and there was some sort of ruckus 00:09:16.000 |
So, I wake up and I walk into the living room 00:09:22.120 |
And basically, "You're not gonna steal my son from me." 00:09:29.680 |
like I said, she was always this person that tested. 00:09:32.240 |
Well, can I do this to you and you'll still come back? 00:09:46.320 |
All right, so, she knew at that point she'd went too far. 00:10:03.800 |
She had a history of doing this kind of stuff. 00:10:11.480 |
she was an LPN, she had, and a very good nurse. 00:10:17.000 |
But she didn't want to work, was a lot of it. 00:10:20.680 |
So, with her, it was easier for her to commit fraud. 00:10:31.720 |
over-the-counter capsules and emptying the capsules out 00:10:36.480 |
and selling it at speed and people were buying it. 00:10:42.520 |
What happens is, we were in Panama City at that point 00:10:58.360 |
"Hey, I'm taking the kids and we're going back 00:11:07.980 |
She stows her clothes in the trunk of the car 00:11:13.680 |
for I think five, six years, something like that. 00:11:17.840 |
she used to bring men home in front of my dad. 00:11:19.940 |
She would, he'd sit there and cry and beg her not to do it. 00:11:40.880 |
And that whole side of the family was just nuts. 00:12:00.360 |
If he found out me and Denise was taking a bath, 00:12:03.800 |
we were allowed to bath and bathe in two inches of water, 00:12:07.880 |
because he didn't want to have to pay the water bill. 00:12:17.340 |
the volume, you could watch it, but without volume. 00:12:29.280 |
So my mom, she used to leave me and Denise at home 00:12:36.880 |
And I mean, sometimes she'd take me and Denise with her. 00:12:48.320 |
And my entry into crime, Denise walks in one day, 00:12:55.520 |
and she's got a pack of pork chops in her hand. 00:12:57.920 |
And looked at her and I said, "Where'd you get that?" 00:13:01.940 |
And, you know, it's like, "Show me how you did that." 00:13:04.400 |
So she takes me over and she shows me how she steals food, 00:13:13.400 |
And we get to the point where we're wanting a sandwich. 00:13:16.000 |
Well, you can't stuff a loaf of bread down your pants. 00:13:20.940 |
I go over to the Kmart, get a hoodie off the rack, 00:13:25.340 |
take the tags off of it, wear it out, worked just fine. 00:13:28.420 |
And the way you steal bread is you put the hoodie 00:13:30.580 |
over your shoulder, stuff a loaf of bread down the sleeve 00:13:45.340 |
and put the bread down here 'cause you might mash the bread 00:13:53.780 |
I'm already seeing what my parents are doing. 00:14:01.540 |
you were already developing yourself into as a kid 00:14:05.820 |
But seeing how they act, how they respond to things. 00:14:08.380 |
And my mom, I guess you'd call it a good thing, 00:14:11.220 |
they never kept any of that hidden from the kids. 00:14:14.460 |
You know, there was no discussions behind closed doors. 00:14:27.620 |
thinking there's rules you're not supposed to break. 00:14:29.780 |
If you see other humans breaking those rules, 00:14:31.900 |
then you realize those rules are just human made. 00:14:37.060 |
I was in an environment where there were no decent people. 00:14:49.860 |
So what happens is, you know, we start shoplifting food. 00:14:54.420 |
My mom finds out that we've been stealing stuff 00:15:02.700 |
I've got the Atari 2600, playing the hell out of it. 00:15:21.940 |
We'd take, you know, we'd steal stuff for her, 00:15:27.740 |
and her and my grandmother would steal stuff. 00:15:45.780 |
that I'm responsible for my choices as an adult. 00:15:52.260 |
The adults in your environment control what you do. 00:15:55.860 |
Once you're an adult, though, your choices are yours. 00:16:14.980 |
hey, this guy's gonna be this guy when he grows up. 00:16:18.260 |
- That said, like, sometimes that one person you meet, 00:16:20.740 |
that decent person, can turn the tide of your life. 00:16:28.060 |
When I'm 15, my dad was in Panama City, Florida. 00:16:33.540 |
My mom was in, you know, we were in Hazard, Kentucky. 00:16:55.100 |
that she was gonna leave one day and never come back, 00:16:57.660 |
that we'd find her dead in a ditch someplace. 00:17:00.220 |
She'd go out and date these men, and she'd come back, 00:17:02.060 |
and she'd talk about how these men were abusing her. 00:17:10.660 |
start talking about how he had tried to rape her, 00:17:13.060 |
you know, trying to get me to respond to that. 00:17:21.260 |
I don't know if I knew it was abuse at that age, all right, 00:17:31.340 |
that I was gonna go down and live with my dad. 00:17:50.460 |
Called my dad, and he told me he had either gotten married 00:17:54.460 |
or he was about to get married to this woman. 00:18:05.020 |
but the result of that was I walked into a hospital, 00:18:12.460 |
and a woman got in the elevator at the same time, 00:18:16.820 |
and I snapped and beat the hell out of her, right there. 00:18:39.980 |
Turned out she looked a shitload like my mom. 00:18:55.140 |
I knocked the hell out of him, took off running, 00:19:33.220 |
They didn't have juvenile facilities in that county, 00:19:39.700 |
Went to trial, pled guilty to assault in the first degree. 00:19:55.900 |
They wanted me to have counseling after that. 00:20:02.740 |
You know, I wanted to, but mom was like, "Don't need it." 00:20:16.780 |
I mean, not a day goes by that I don't think about that. 00:20:30.500 |
So I go back to the high school that I was in, 00:20:47.140 |
I finish up the year there and move back to Perry County, 00:20:54.220 |
So we move there, and they've got three high schools there. 00:20:57.940 |
They've got MC Napier, they've got Hazard High School, 00:21:00.260 |
and then they've got Dill Scombs High School. 00:21:30.780 |
So from there, we went down to the city school, Hazard, 00:21:42.940 |
"No, let's just take me to this other school." 00:22:14.420 |
as the way she explains it, she heard this voice. 00:22:37.540 |
I'm like, "No, I'm not interested in theater, 00:22:41.980 |
Well, she was the head of the drama department, 00:22:56.820 |
she was the first decent person I met in my life, 00:22:58.740 |
and she became this kind of surrogate mother to me. 00:23:03.700 |
I become one of the top academic team guys in the state. 00:23:11.420 |
I was this, just scourge across all the counties 00:23:27.420 |
the high school that I came from was Whitesburg, 00:23:29.940 |
and the first time that Whitesburg came against us, 00:23:32.860 |
she told me, I was talking to her about a year ago, 00:23:37.940 |
she said, "That first meet against Whitesburg," 00:23:40.460 |
she said, "The captain came in, looked at you, 00:23:44.660 |
and said, 'Oh, you've got that Johnson boy on your team?'" 00:24:11.900 |
and everything else, and I'm the idiot that turned 'em down. 00:24:18.340 |
of all the many things you could probably do, 00:24:23.180 |
- I'm very good on stage, I'm very good on stage. 00:24:28.460 |
- Not professionally, we've done the college circuit, 00:24:32.140 |
What happened was, so I turned down the scholarships. 00:24:44.140 |
hires a new theater director out of California. 00:24:53.060 |
His claim to fame, he had written the Three Ninjas movie. 00:25:02.940 |
So, he invites Ed Emanuel to come down and see the play, 00:25:11.460 |
I was doing like, it was a multiple role thing. 00:25:13.700 |
I was doing like 18 different roles in the show. 00:25:16.140 |
So, Ed sees the show, and he was like, "Scholarship." 00:25:27.620 |
And he was like, "I'll be back in two weeks." 00:25:35.420 |
I'm out shooting ball with my cousins and friends. 00:25:50.460 |
He walks in the house, stays about 15 minutes, 00:25:54.740 |
walks out, white as a sheet, doesn't say a word to me, 00:26:06.540 |
What happened is my mom, he walks in, introduces himself. 00:26:14.700 |
"You are not gonna steal my goddamn son from me." 00:26:37.220 |
I'd already been kinda brought up on that side 00:26:39.700 |
of the family with the crimes that they were doing. 00:27:01.980 |
You know, they can get 'em a piece of equipment. 00:27:08.260 |
So, you start mining, but you don't get the permit. 00:27:10.740 |
So, you don't have to pay, back then it was like $3,500 00:27:14.500 |
for a two-acre permit, or $5,000 for a two-acre permit. 00:27:20.540 |
Then you have to pay for the reclamation on top of that. 00:27:22.780 |
So, once you uncover the pit, take the coal out, 00:27:27.660 |
sow grass, make sure everything is environmentally friendly. 00:27:30.420 |
You gotta have a silt pond, everything else at that point. 00:27:32.940 |
- So, the whole idea is you buy an acre of land, 00:27:36.940 |
there's a whole process you're supposed to go through. 00:27:49.900 |
You need, you can farm out the trucking to someone, 00:27:52.860 |
if you need, or a trucking company, if you need to do that. 00:27:56.540 |
Then you've got your, whoever owns the business as well. 00:27:58.700 |
So, very few people can run an operation like that, 00:28:01.780 |
and profit fairly well, as long as you don't have to do 00:28:05.660 |
the reclamation, all that crap on top of it, all right? 00:28:12.860 |
a pit, so a ton of coal is basically about 36 cubic inches, 00:28:21.860 |
'cause it's the weight of the bituminous coal 00:28:28.420 |
The fact that you know exactly the volume of a ton of coal, 00:28:36.580 |
So, you uncover the pit, and then you've got to sell the pit. 00:28:43.180 |
Well, you sell it to one of these other coal tipples 00:28:45.660 |
that knows that they're buying the shit illegally. 00:28:50.600 |
they'd give you like 36 bucks per ton, is what that is. 00:28:54.100 |
And you'd have to go out, and you'd test the BTUs on it. 00:28:56.660 |
You'd take a sample to the lab, test the BTUs. 00:29:05.860 |
- How pure the coal is, what BTU it burns at. 00:29:17.020 |
You'd take that sample over to the coal tipple. 00:29:21.460 |
"How many trucks you got, or how many tons you got?" 00:29:26.160 |
And where you get it out, because you've got the agents 00:29:32.260 |
because the people that, you've bought the rights 00:29:41.340 |
Well, the other people there, are you paying them off? 00:29:45.200 |
Well, if you're not paying them off, guess what? 00:29:50.940 |
Well, all of a sudden, you've got all these inspectors 00:29:55.900 |
So they're looking for you to get the pit out. 00:30:00.140 |
So you're loading it up two o'clock in the morning, 00:30:10.260 |
And you said you worked the mine too, when you were younger? 00:30:12.540 |
Yeah, I learned how to run a loader, run a dozer. 00:30:24.700 |
So I knew how to do charity fraud as well, insurance fraud. 00:30:28.540 |
Charity fraud, can we break down some of these? 00:30:31.820 |
Charity fraud, it's much more romantic than what it sounds. 00:30:34.580 |
It was basically, it was basically standing beside the road 00:30:39.340 |
with a sign and a bucket, taking up collections 00:31:12.300 |
to see how far she can push you and the people around her, 00:31:15.700 |
and they still love her, today, do you love her? 00:31:29.220 |
And I'm like, I looked at him, 'cause hell, I'm 52 now. 00:31:32.700 |
Prior to 52, I'd have been like, "No, you need to do this." 00:31:35.200 |
But I looked at him and I was like, "I understand. 00:31:42.820 |
I was talking to him yesterday and he asked me, 00:31:52.580 |
"but my mom is not a good person, she's not." 00:31:55.660 |
And he told me, I was talking to him on the phone yesterday, 00:31:59.220 |
and he told me that it took him several years 00:32:07.500 |
especially my dad, my dad came from a good family, 00:32:13.040 |
I think that when you're that victim of abuse, 00:32:17.380 |
you've never seen it before, you've never encountered it, 00:32:21.420 |
and then it happens, well, you're like that frog in water 00:32:27.220 |
gradually increases until how do you get out of it? 00:32:30.100 |
Everybody else sees what's happening, but you don't. 00:32:34.740 |
so it took me a long time to come to terms with that. 00:32:39.060 |
My sister came to terms with it long before I did. 00:32:42.180 |
My sister, she's been a decade without talking to my mom, 00:32:45.820 |
like she had tried to commit suicide, I didn't know that. 00:32:51.700 |
that she always thought someone was gonna come in 00:32:55.980 |
and save us, and my response, just immediate response, 00:33:24.580 |
that has expected someone to come in and save her. 00:33:28.300 |
- Well, and almost like, it's all going to be okay, 00:33:36.220 |
- Unless you make it okay, it ain't gonna be okay. 00:33:50.080 |
over two years ago, I started this legal career of mine, 00:33:55.080 |
I've been the guy who has, I spent a lot of time 00:34:04.240 |
So I'm big about taking responsibility for my actions. 00:34:16.280 |
she would start the conversation talking about 00:34:31.100 |
so it's more healthy for her not to talk to you. 00:34:37.920 |
in her ways of the past. - No, no, not at all. 00:34:47.720 |
the people in your life, accept that responsibility 00:34:51.520 |
and be able to discuss it with me, we'll have a talk. 00:34:55.840 |
Other than that, I don't wanna talk to you anymore. 00:35:00.520 |
calling, cussing my wife out, cussing me out. 00:35:03.740 |
You know, I don't need you, blah, blah, blah, blah, blah. 00:35:09.600 |
and she's never really contacted me after that point. 00:35:18.020 |
- What do you take from the way he's taken on death, 00:35:30.100 |
- He's one of these guys that, you know, like I told him. 00:35:33.100 |
I told my dad about the abuse and everything else 00:35:52.980 |
there was a point that my mom and dad would leave the house 00:36:22.140 |
- I was talking about that and this lady comes up to me 00:36:24.300 |
after the presentation and she had a career previous to that 00:36:31.900 |
And she told me, she's like, Brett, she's like, 00:36:51.800 |
by trying to commit suicide, things like that. 00:36:57.220 |
And not only that, my wife pointed out to me that, 00:37:00.540 |
again, it's that Eastern Kentucky mentality stuff. 00:37:27.780 |
I was just the guy that kept right on going with it. 00:37:37.340 |
In describing some of the things you did or knew about, 00:37:40.260 |
you said, quote, "I once stole several thousand dollars 00:37:43.740 |
"worth of coins from a family trying to sell them 00:37:48.860 |
"Another time, I sent a counterfeit cashier's check 00:37:52.940 |
"to a victim and he ended up being arrested for it. 00:38:11.380 |
Another member, Iceman, used to flood his enemy's 00:38:20.820 |
Can you tell some of these stories that stand out to you 00:38:23.900 |
that are particularly despicable or representative 00:38:31.220 |
that defined your approach and who you were at that time? 00:38:36.220 |
- Let me say that I did not care about my victim. 00:38:41.260 |
All right, I cared about me is what I cared about. 00:38:47.900 |
You don't give a shit what you're doing to anybody else. 00:39:10.580 |
October 26th of '04, Secret Service had shut us down. 00:39:13.860 |
33 people arrested, six countries in six hours. 00:39:16.900 |
I was the guy that was publicly mentioned as getting away. 00:39:35.540 |
I don't have any way to come in with any money, 00:39:37.820 |
so I start running counterfeit cashier's checks, 00:39:42.380 |
having them send products or bullion collections, 00:39:48.260 |
and I would pay with it with a counterfeit cashier's check. 00:39:54.060 |
She had been collecting these silver coins all of her life. 00:40:00.420 |
So she had a whole collection of these things, 00:40:02.580 |
like, I don't know, 80, 90 pounds of this stuff. 00:40:09.180 |
So convinced her that I was a legitimate person, 00:40:26.600 |
She was even on the ad and we talked on the phone 00:40:34.940 |
to put a roof on the house for her and her kids. 00:40:42.300 |
What was more important was me at that point. 00:40:44.420 |
- Can I ask you a question about the social engineering? 00:41:09.800 |
- So first let me say that I became a social engineer 00:41:14.800 |
as a child, all right, because the adults in my environment, 00:41:20.040 |
as a child, I had to know exactly what they were thinking 00:41:23.480 |
and be able to try to manipulate that for survival. 00:41:26.560 |
So I became a social engineer for survival initially. 00:41:32.740 |
with a lot of cyber criminals is the exact same thing. 00:41:39.220 |
then later on they use those tools to victimize others. 00:41:43.180 |
- Which is fascinating because in order to understand 00:41:49.260 |
So you have to really put yourself in the shoes 00:42:00.980 |
that might cause them once you manipulate them. 00:42:11.500 |
because a cyber criminal, and I was no different, 00:42:16.100 |
So the justification becomes what's important. 00:42:33.980 |
How do you establish trust with a potential victim? 00:42:42.860 |
that that trust is established through a combination 00:42:53.340 |
A lot of times we don't understand how they operate, 00:42:55.060 |
but we trust the news that comes across the line. 00:42:59.420 |
We trust IP addresses if we're advanced enough 00:43:07.580 |
Spoof phone numbers, spoof browser fingerprints, 00:43:10.240 |
whatever that may be, whatever the tool may be. 00:43:16.540 |
At that point, you shoot in with the social engineering 00:43:27.740 |
- This is fascinating about the way humans interact 00:43:30.380 |
with the world, which is you're almost too afraid 00:43:36.420 |
You have a lot of sort of conspiracy theories now 00:43:40.380 |
about distrust institutions and thinking like 00:43:48.300 |
And that conspiracy theory is fascinating to me 00:43:52.020 |
because it basically says that you can't trust anybody. 00:44:08.840 |
is kind of full of happiness if nobody screws you over. 00:44:16.620 |
and you get excited and all that kind of stuff. 00:44:18.780 |
But if you do that too much, you're gonna get burned. 00:44:23.780 |
in terms of optimizing happiness where you trust, 00:44:34.300 |
You're almost too afraid to distrust everything 00:44:36.020 |
'cause you'll never get anything done on the internet. 00:44:38.820 |
But then if you trust too much, you can get screwed over. 00:44:46.260 |
trust this, you kind of help them build the narrative 00:44:53.280 |
- So in a lot of the times, that social engineering 00:44:55.660 |
is just feeding into what the victim wants to believe. 00:45:01.540 |
It's not really coming up with a brand new story at all. 00:45:03.620 |
It's just knowing what the motivations of that victim is, 00:45:10.900 |
has to almost immediately know what's driving 00:45:16.300 |
If I'm working on a phone, talking to someone 00:45:18.620 |
over the phone, I have to know within seconds 00:45:25.820 |
or whoever I'm talking to on the other end of the line. 00:45:28.100 |
- So fascinating because you truly are empathizing 00:45:33.300 |
- What is it, this businessman, Steven Schwarzman, 00:45:44.020 |
the way you build deep relationships is you really 00:45:47.820 |
kind of notice the things that people are telling you, 00:45:51.220 |
like what they want and what they're bothered by, 00:46:12.260 |
- You're looking for that just to see how I can 00:46:17.020 |
So the lady was one story, another truly despicable story. 00:46:34.620 |
- Yeah, PH, that's another social engineering attack. 00:46:42.380 |
and saying, "Hey, we've got a security problem. 00:46:44.260 |
"We need you to update your account information." 00:46:46.980 |
Well back then, no one had ever seen a phishing attack. 00:46:53.260 |
You were getting just complete identity profiles 00:47:03.860 |
We had phished out, I don't know, 200,000 eTrade accounts. 00:47:08.420 |
That's what we had the login credentials for. 00:47:11.140 |
- Login password, complete social, date of birth, 00:47:13.900 |
mother's maiden, account information, everything else. 00:47:26.180 |
ACH the money out to whatever account you wanted to, 00:47:31.540 |
Ate 'em alive on that for four to six months. 00:47:34.060 |
eTrade got to the point where you couldn't do 00:47:42.780 |
Well, you're still sitting on thousands of eTrade accounts. 00:47:51.540 |
- Yeah, so what you do is you find some fat cat 00:47:53.460 |
that's got his retirement, invested in blue chips. 00:48:01.540 |
buy into that penny stock, cash the fat cat out, 00:48:08.140 |
So you're destroying people's retirement accounts 00:48:13.980 |
And of course, eTrade's response is, not our problem. 00:48:17.980 |
It's your problem, you shouldn't have given up your password 00:48:21.500 |
And you still see that issue today with Zelle scams 00:48:26.300 |
- Zelle, so you know, the instant payment that-- 00:48:29.820 |
same type with different schemes and mechanisms. 00:48:43.740 |
You know, you've got some culpability in that 00:48:45.900 |
and you're just trying to avoid paying part of the bill, 00:48:50.180 |
- One of the things, just to stand fishing for a bit, 00:48:52.420 |
is it really makes me sad 'cause there's been people 00:48:57.420 |
on all kinds of platforms, including YouTube comments, 00:49:00.660 |
but emails too, they figured out emails somehow. 00:49:13.940 |
they're finding them on platforms like LinkedIn 00:49:16.860 |
and YouTube and so on, and they are figuring out ways 00:49:24.400 |
which I suppose seems more authentic to those people. 00:49:29.400 |
So they send them an email from what looks like me 00:49:37.980 |
the interesting thing, the emails sound like something 00:49:41.860 |
So these aren't even, at this stage, it's not even, 00:49:44.540 |
it doesn't feel automated or if it's automated, 00:49:47.460 |
there's a human in the loop that's really fine tuning 00:49:51.580 |
at this specific, or maybe I'm very predictable, 00:49:53.940 |
but it's very loving in the way I would write a message. 00:50:04.100 |
or the website and say, "Eh, if you were paying attention, 00:50:21.980 |
if you look at business email compromise, all right? 00:50:24.220 |
So the way a business email compromise typically works 00:50:26.760 |
is the attacker will find a payroll person, find a CEO. 00:50:35.860 |
that's targeting one specific individual, all right? 00:50:40.740 |
And the way he does that is he pulls all the information 00:50:43.820 |
he possibly can on that person, all right, that CEO. 00:50:58.140 |
And he'll go in there and he'll start reading 00:51:02.980 |
to the payroll department, see what that relationship is. 00:51:07.580 |
Talking about relationships, talking about vacation. 00:51:17.060 |
and spear phish the payroll department as well. 00:51:20.020 |
So then he spear phishes them, gets those credentials. 00:51:22.580 |
At the same time, he creates a Unicode domain 00:51:29.740 |
he's got that Russian letter that looks like an I, 00:51:35.220 |
Comes back into the email, into the payroll email, 00:51:44.180 |
and then sends out a message using the correct language, 00:51:51.060 |
and says, hey, we're updating our account status. 00:51:53.940 |
I need you to send this payment instead of this over here. 00:51:59.820 |
And that is business email compromise in a nutshell, 00:52:10.140 |
'cause there's a distribution of responsibility 00:52:25.940 |
and those crimes, and that's one of the things 00:52:32.860 |
The stat is 90% of every single attack uses a known exploit. 00:52:46.220 |
The meat and potatoes are that 90%, known exploits. 00:52:51.220 |
- And then the rest is, well, you're saying it's, 00:52:54.860 |
maybe you mean it's not technically sophisticated, 00:52:59.900 |
- Very sophisticated on that end, very sophisticated. 00:53:02.380 |
- It's a fascinating study of human psychology. 00:53:05.860 |
and then using that trust to defraud that victim. 00:53:16.700 |
I wish you could tell their stories in a way, 00:53:29.420 |
our weak points, our hope, our desire to trust others. 00:53:59.180 |
So here's what, okay, let me construct an example. 00:54:02.460 |
So if my friend were to spear phish a CEO, right, 00:54:08.500 |
and get their information, and after they get control, 00:54:16.220 |
they tweet something loving and positive, what's the crime? 00:54:29.120 |
So no monetary loss, or was there a monetary loss? 00:54:38.200 |
Now, the crime would be unauthorized access, all right? 00:54:42.160 |
But no real victim on that, unless the person 00:54:47.080 |
whose account you took over takes exception to that. 00:54:53.120 |
- So there's not really standard, like, fines? 00:55:04.280 |
when I got the zero-day attack on the QNAP mass, 00:55:22.320 |
Like, you are the victim of QNAP's incompetence. 00:55:41.200 |
printed out at the house, I've been going through it, 00:55:47.200 |
about their vulnerabilities, and they lied to investors. 00:55:49.760 |
The people who came in, the auditors who they would hire, 00:56:18.000 |
Now, does that mean that SolarWinds isn't all fucked up? 00:56:21.360 |
They are, and there needs to be some accounting in place. 00:56:25.540 |
But the only individual, the only people responsible 00:56:29.380 |
for crime are the criminals, and that's either online, 00:56:45.200 |
and I think that SolarWinds is certainly responsible, 00:56:48.640 |
not responsible, they're culpable for what happened. 00:56:52.280 |
- Can you actually tell folks about SolarWinds? 00:56:56.240 |
What are some interesting things that you're aware of? 00:57:00.640 |
- SolarWinds was very, it provided a backbone of security 00:57:05.640 |
for hundreds, thousands of different companies. 00:57:20.440 |
So what happens is, is you get a Russian group 00:57:27.800 |
they hack into SolarWinds and get access to it, 00:57:30.640 |
and it allows them to view every single thing, 00:57:34.640 |
I mean every single thing, about every single client 00:57:43.040 |
So entire snapshots of all the IP that was going on, 00:57:48.800 |
every single secret that was going on with those companies. 00:57:58.000 |
I mean, it's just a complete and total nightmare, 00:58:10.760 |
You know, there's not been a lot of news lately about it, 00:58:13.520 |
but the fact of the matter is, is that's the type of attack 00:58:24.560 |
- And so now, there's people sitting on information. 00:58:29.520 |
has been Microsoft Outlook 365, things like that. 00:58:42.600 |
Let's find new vulnerabilities, new zero days. 00:58:46.560 |
but this opens up an entire new threat surface 00:58:52.520 |
Once all the chips are down, everything's tallied up, 00:58:54.840 |
people are gonna be like, yeah, we're done, we're done. 00:59:00.400 |
All right, this whole computer thing, we tried it. 00:59:18.300 |
- Right, so the capacity for destruction is huge here. 00:59:28.140 |
So you've got Iran, you've got North Korea, China, Russia, 00:59:36.680 |
that are interested in the United States as well. 00:59:44.460 |
All right, so Russia's very good about working 00:59:51.880 |
then Russia will take the information they want to, 01:00:07.200 |
- So North Korea is actively involved in cybercrime. 01:00:13.320 |
So absolutely they're actively involved with that. 01:00:29.320 |
the follow-up to that is this NotPetya attack that happened. 01:00:34.040 |
And so that was the most sophisticated attack 01:00:48.620 |
but it's that social engineering sophistication. 01:00:50.840 |
How do you get these things put together in line 01:00:55.080 |
- But when you get access to the source code, 01:01:03.420 |
that's what separates the men from the boys in this game. 01:01:07.800 |
I don't have to worry about social engineering. 01:01:09.640 |
I've got source codes and I've got professionals 01:01:12.440 |
that are looking at that, and that's your ass. 01:01:15.180 |
- Which then enables probably even more powerful 01:01:30.360 |
as we put more and more of ourselves on the internet, 01:01:35.300 |
into the metaverse, that there's so many more 01:01:59.220 |
So you look at deep fakes, you look at fake news, 01:02:12.480 |
if nothing is true and you can't trust anything. 01:02:18.480 |
- You see, we as human beings, we wanna trust. 01:02:27.480 |
But it's more like you let go of an idea of absolute truth, 01:02:32.400 |
and it more becomes like a blockchain-style consensus. 01:02:38.800 |
there's this human dream, you get this on the internet, 01:02:58.120 |
is counterproductive, maybe human civilization 01:03:05.080 |
And so it's always going to be, everything is shrouded, 01:03:08.740 |
and you can call them lies, or you can call them inaccuracies, 01:03:15.400 |
it's going to be a sea of lies and delusions. 01:03:22.320 |
develop bigger and bigger islands of consensus 01:03:24.760 |
that allows us to live a stable and happy society. 01:03:34.000 |
a high quality of life for the inhabitants of the island. 01:03:38.640 |
I mean, that's, we're going to agree on this. 01:03:40.520 |
- And then don't use outlines, no, I'm just kidding. 01:03:54.720 |
the precursor to today's Darknet and Darknet markets. 01:04:13.320 |
I'm the guy that, from mom, I get the criminal mindset, 01:04:16.720 |
from dad, I get that, don't want him to leave. 01:04:29.720 |
- My first girlfriend was a preacher's daughter, 01:04:32.120 |
and crazy over her, dated her for five years, 01:04:38.720 |
well, not quickly, it took her five years to figure out 01:04:45.160 |
I could talk it, but more that agnostic than anything, 01:04:54.920 |
- You'd make one hell of a preacher, by the way. 01:05:04.080 |
I'm looking for Jesus to show up, and he just doesn't. 01:05:14.520 |
And I had posted an advertisement on one of the billboards 01:05:18.800 |
looking for an adult babysitter, hot, blonde, 01:05:24.120 |
Buddy of mine shows up, and he's like, "Brett." 01:05:27.640 |
He's like, "Hottest girl in school, right down the hall." 01:05:37.440 |
So I just walk up, and me and Todd, that was my buddy, 01:05:40.840 |
walk up, and I'm just sitting there and listening, 01:05:54.160 |
And I was like, "Well, you're talking at her. 01:05:59.400 |
- Damn, that's a smooth pickup line, by the way, 01:06:26.240 |
She knew I did a lot of theater, stuff like that. 01:06:32.800 |
There was no jobs to be had, so I got a job in Lexington, 01:06:38.520 |
Got a job in Lexington at Lexmark testing printer boards, 01:06:52.100 |
Got married, faked a car accident to get the rest 01:07:00.240 |
And the faking on that, man, I had bought a Chevy Spectrum 01:07:07.240 |
at a car auction, gave like 500 bucks for it. 01:07:09.800 |
My aunt had previously defrauded USAA insurance 01:07:16.320 |
She's like, "Look, go down to this chiropractor, 01:07:18.720 |
"make sure you get the insurance where they'll pay 01:07:34.360 |
and you can also define how long you were unable to work. 01:07:38.400 |
And the chiropractor will sign off on any damn thing. 01:07:40.480 |
All right, so my cousin, Ronnie, he figures out 01:07:47.840 |
So he comes to me, he's like, "Hey man, can I get in on that?" 01:07:51.460 |
So this kid, he's five days younger than I am. 01:07:58.240 |
tells the dentist not to numb it, not to stitch it, 01:08:02.760 |
So he shows up, he shows up the day that we're driving 01:08:06.240 |
out to fake the accident, he's got blood all over his shirt, 01:08:08.400 |
he's still bleeding out of the mouth and everything else. 01:08:10.800 |
And he's like, "Yeah, man, it's gonna be good, 01:08:27.280 |
So we go visit and everything, come back out that night, 01:08:32.360 |
Me and Ronnie walk back up, of course it totals the car. 01:08:35.880 |
Walk back to my mom's, acting like we've wrecked, 01:08:37.960 |
she knows what time it is and everything else, 01:08:44.440 |
And me and my wife moved from Hazard to Lexington. 01:09:05.640 |
everything else was never enough to show love 01:09:13.360 |
- So that was the thing, that was the way you show love, 01:09:23.520 |
it was, "Don't worry about working, I got it. 01:09:29.520 |
I was like, "You just worry about going to school. 01:09:31.560 |
So don't worry about cooking and cleaning, I got it. 01:09:35.400 |
So not only was I this guy that was going overboard, 01:09:37.800 |
but I was kind of a control freak too, right? 01:09:55.120 |
and trying to hide that from her at the same time. 01:10:03.760 |
the first job I had was a telemarketer at a cemetery 01:10:25.180 |
selling food baskets to the food banks and everything. 01:10:46.240 |
Turns out one of the persons that I had called 01:10:58.080 |
Got arrested, spent three months in a county jail 01:11:08.080 |
back to Hazard and live with Susan's parents. 01:11:15.040 |
And I started surfing around online, found eBay. 01:11:19.880 |
And didn't really know how to make money on eBay. 01:11:22.760 |
About the same time, I'm committing low-level frauds 01:11:30.960 |
The first time I've really talked about that, 01:11:36.200 |
- So more a person, so not using a platform like eBay, 01:11:41.520 |
- I would find somebody that had like a stereo system 01:11:53.960 |
So got the money to move to, finally did those schemes 01:11:57.440 |
enough to get the money to move back to Lexington. 01:12:01.760 |
Got to Lexington and by this point I'm doing these, 01:12:12.560 |
One night I'm watching Inside Edition with Bill O'Reilly 01:12:18.880 |
So I'm sitting there watching and the one they're profiling 01:12:20.760 |
is this one called Peanut the Royal Blue Elephant 01:12:28.760 |
My initial thought was, well, there's gotta be one 01:12:32.640 |
in one of these Hallmark stores in Kentucky someplace. 01:12:36.880 |
went out around all the Hallmark stores looking for peanut. 01:12:46.960 |
turns out they had a little gray Beanie Baby Elephants 01:13:04.740 |
get them out of the bath, looks like they've got the mange. 01:13:07.640 |
And what happens is, so I'm trying to dye the damn thing. 01:13:14.620 |
So I got online, found a picture of a real one, 01:13:25.520 |
and then maybe claim that it got messed up in the mail 01:13:32.320 |
Woman thought I had the real thing, she wins the bid. 01:13:35.600 |
That social engineering kicks in immediately. 01:13:41.400 |
So as soon as she wins the bid, I send her a message. 01:13:54.980 |
send them to me, issued by the US government, 01:13:59.060 |
Soon as I get the money orders, I'll send you your animal. 01:14:02.600 |
She believed that, didn't ask any questions at all. 01:14:09.680 |
Sent her the creature, immediately got a phone call. 01:14:13.880 |
My response, lady, you ordered a blue elephant. 01:14:23.040 |
What I found out, and that's really the first lesson 01:14:32.760 |
they get exasperated, throw their hands in the air, 01:14:46.480 |
by the process, so it's just easier to walk away, 01:14:52.160 |
- So there's a whole slew of reasons, all right? 01:14:56.760 |
There's the embarrassment, so if you figure out, 01:15:03.560 |
we're all very good about blaming the victim for crimes. 01:15:07.600 |
Why would you send money to somebody you don't know? 01:15:12.240 |
You've got the issue of who do you complain to? 01:15:28.120 |
Local's gonna tell you, hey, it happened in Kentucky. 01:15:31.600 |
Kentucky's gonna tell you, well, shit, you're over there. 01:15:34.920 |
So there's this whole issue of the jurisdiction, 01:15:49.440 |
Started to understand how to hide identities, 01:15:54.760 |
Pirated software led into installing mod chips. 01:16:05.440 |
so I started selling and installing mod chips. 01:16:13.800 |
which in turn led into programming satellite DSS cards. 01:16:35.980 |
so there's laws and rules that you're breaking, 01:16:43.320 |
So there's also legitimate ways of doing that, 01:16:47.280 |
which is break the rules of the conventions of the past. 01:16:51.400 |
That's what Elon Musk and his ilk do all the time. 01:17:09.040 |
you have to then compute the ethical damage you're doing. 01:17:15.220 |
That is fundamentally the thing that you're breaking, 01:17:18.040 |
is you're adding to the suffering in the world 01:17:20.960 |
in one way or another, and you're justifying it. 01:17:37.800 |
if you can introspect your thinking process here, 01:17:41.840 |
this is a new, I like how you remember this in HP. 01:17:46.540 |
Like what, this is a totally new thing to you. 01:17:59.160 |
- When you were thinking through these problems, 01:18:08.680 |
What is your approach to solving these problems? 01:18:19.760 |
So you fix that aspect, you commit the crime again, 01:18:23.840 |
and it goes a little bit further, and it screws up. 01:18:30.380 |
- So there's not a deep design thinking like-- 01:18:38.280 |
it becomes that, and you can apply that to other things 01:18:44.480 |
But initially, it's basically trial and error. 01:18:47.440 |
You've got a problem, how do you solve that problem? 01:18:50.880 |
So how do I, I'm committing these crimes under my name, 01:19:05.720 |
that a lot of people to this day still don't really get. 01:19:08.280 |
All right, why would I commit a crime under my name 01:19:13.880 |
and that takes trial and error to get to that point 01:19:20.660 |
All right, but with me, it was, I mean, it's trial and error, 01:19:32.400 |
let's say non-traditional ways of getting around things 01:19:39.640 |
probably ask this later, is there's also a unique aspect 01:20:02.800 |
'cause identity theft can take so many forms. 01:20:13.240 |
- Started with love, so now we're doing these schemes online. 01:20:29.120 |
that will create an industry for criminals, all right? 01:20:42.000 |
"Hey, it's legal for my citizens to pirate those signals." 01:20:59.720 |
So PayPal's coming right online at about the same time. 01:21:07.280 |
You go down to Best Buy, buy the system for $100, 01:21:09.420 |
take it out in the parking lot, open system up, 01:21:14.720 |
program the card, ship its ass to Canada, $500 a pop. 01:21:21.520 |
Making, you know, three, $4,000 a week doing that. 01:21:25.160 |
Have so many orders, I can't fill all the orders. 01:21:39.140 |
Because I already found out, people don't complain. 01:21:42.620 |
All right, they're not gonna complain to anybody. 01:21:53.040 |
And it amazes me that everybody is using PayPal. 01:21:58.040 |
It's like, you don't even have to really ask. 01:22:03.320 |
And PayPal had no clue what they were doing with security. 01:22:09.880 |
I'm having the PayPal cashed out to bank accounts 01:22:25.480 |
best thing that I can do is get a fake driver's license. 01:22:28.960 |
Open up a bank account using that driver's license, 01:22:33.320 |
Good, no idea where to get a fake ID, not a clue. 01:22:43.920 |
Thought I found a guy, sent him $200, sent him my picture. 01:22:59.400 |
He's building that trust that I talked about. 01:23:06.160 |
And there was no site that dealt with anything 01:23:14.000 |
The only real avenue you had was an IRC chat session, 01:23:22.800 |
You don't know who the hell you're talking to. 01:23:27.280 |
and you're sitting there trying to conduct business. 01:23:29.440 |
So, if somebody claims they've got a product or service, 01:23:34.400 |
Because in those channels, everyone's a criminal. 01:23:40.920 |
and I happened upon a website called Counterfeit Library. 01:23:51.720 |
But they had a forum, and no one was using the forum. 01:23:55.320 |
So, I basically get on there and bitch every day. 01:24:17.760 |
Beelzebub gets me on ICQ, and he sends me a message. 01:24:20.800 |
He's like, I went by the screen name of Gollum 01:24:28.640 |
And he's like, "Well, I'm gonna charge you for it." 01:24:40.140 |
"you have to trust people, or you're gonna fail." 01:24:49.000 |
Well, by this point, I'm friends with the people 01:24:55.640 |
And I tell him, I'm like, "Okay, I'm gonna send you $200. 01:24:59.500 |
"That way, when you rip me off, I'll have them ban you, 01:25:13.720 |
and real guy, worked at ADP Payroll to this day, 01:25:23.420 |
at that point in time, it was the prettiest thing 01:26:04.520 |
- You have to have an inner circle that you trust. 01:26:07.780 |
- I'm sure you've probably heard me say this before. 01:26:14.580 |
There are three necessities to being successful online 01:26:21.080 |
committing the crime, and then cashing it out. 01:26:24.260 |
All three of those necessities have to work in conjunction. 01:26:39.700 |
who sell PII, credit card logins, data tools. 01:26:49.860 |
how to commit the crime, and those people certainly 01:26:54.660 |
So, you've got, either because of a skill level, 01:27:00.180 |
limits what that individual can do, all right? 01:27:10.660 |
And that means you have to trust those people. 01:27:17.580 |
All right, so, Counterfeit Library is the start, all right? 01:27:20.580 |
Counterfeit Library transitions over to Shadow Crew. 01:27:24.540 |
Right before that transition, there's a Ukrainian guy 01:27:31.300 |
He saw what we were doing with Counterfeit Library, 01:27:36.020 |
He was getting all these credit card details, 01:27:42.260 |
I wonder if people would buy stolen credit card details. 01:27:45.260 |
- That's pretty good Ukrainian-Russian accent. 01:27:47.620 |
- So, he picks up the phone, he calls his buddies, 01:27:52.260 |
they call their buddies, they have a physical conference 01:27:55.060 |
in Odessa, 150 of these cyber criminals show up, 01:27:58.460 |
and they launch this idea, they launch a website 01:28:04.460 |
of all modern credit card theft as we know it, all right? 01:28:07.500 |
So, remember I mentioned those three necessities 01:28:16.060 |
and he partnered with all these other Ukrainians 01:28:19.580 |
The problem was, is so much fraud had been committed 01:28:28.900 |
and tried to cash it out, you weren't doing it 01:28:33.740 |
gathering data, committing crime, cashing out. 01:28:35.860 |
Dmitry had the data, they could commit the crime, 01:28:44.380 |
one day I get this message, or not a message, 01:28:53.300 |
"Give me an address, give me a burner phone number, 01:28:56.540 |
"wait five business days, order whatever you want to." 01:29:36.620 |
he made a very passable social security card. 01:29:49.340 |
"that comes in, they'll have to send it to you, 01:30:11.780 |
because he wasn't making shit selling driver's licenses. 01:30:20.500 |
cashing out at casinos, doing some shit with that. 01:30:30.420 |
if I review somebody, they make a lot of money. 01:30:45.460 |
After a while, I'm like, "Okay, I gotta do something." 01:30:54.700 |
So, I tell him what it is, he's like, "You review me." 01:31:00.660 |
give him a burner phone number, wait five business days, 01:31:08.100 |
I get back on ICQ, "Hey, man, it didn't work." 01:31:11.940 |
I was like, "Look, I'll give you one more chance, 01:31:17.500 |
Give him another address, another phone number, 01:31:22.380 |
hit Thompson's Computer Warehouse for $4,000, 01:31:33.820 |
and literally overnight, we turn from an eBay, 01:31:39.940 |
And that becomes a lot of money really quickly for members. 01:31:44.100 |
So, we were doing, now it's called CMP fraud, 01:31:58.580 |
Just buying laptops, what have you, and cashing out, 01:32:01.700 |
put them on eBay for sale and sell them like that. 01:32:10.980 |
these other guys that would sell not just credit card data, 01:32:14.100 |
but counterfeit physical credit cards as well. 01:32:32.780 |
and I became the United States salesperson for BOA, 01:32:38.220 |
is he was the first dumps provider in the United States. 01:32:42.420 |
So, on the back of your credit or debit card, 01:32:48.380 |
There was the first data track is customer's name, 01:32:52.540 |
forward slash, 16 digit algorithm outside of that. 01:32:58.460 |
Third data track is called indiscriminate data. 01:33:01.420 |
So, what's bought and sold is the second data track. 01:33:06.860 |
And the reason that's sold is when you go into a shop, 01:33:12.780 |
the only information that's sent out for verification 01:33:17.220 |
That goes to the processor bank for verification. 01:33:21.580 |
shows up on the screen of the cashier in front of you. 01:33:32.380 |
Track one, you create one fake driver's license. 01:33:39.500 |
swipe the card, track two gets sent off for verification. 01:33:42.060 |
Track one shows up on the screen in front of the cashier. 01:33:44.900 |
If you ever ask for ID, you pull out the fake ID. 01:33:51.140 |
- And track one could be, it doesn't have to be connected. 01:34:00.020 |
- So, Scrip brought a host of technical people 01:34:10.180 |
We had all these people that were doing this stuff. 01:34:36.100 |
So what happens is, remember I told you of track two. 01:34:39.080 |
Card number, forward slash, 16-digit algorithm. 01:34:46.280 |
so you can swipe the card or take it to the ATM machine. 01:34:54.800 |
I mean, we were doing a lot of fishing, a lot. 01:34:58.540 |
We were getting pins, we were getting card numbers, 01:35:08.860 |
no bank had implemented the hash on track two. 01:35:26.280 |
- Well, wait, sorry, I'm trying to understand. 01:35:38.320 |
as long as just the track two was a complete track two. 01:35:41.800 |
- So, it's a valid track two that doesn't matter, 01:35:51.200 |
you need to, typically, today you'd need a whole track two. 01:35:55.800 |
All right, you need the 16 digit card number, 01:35:59.000 |
the forward slash, and then whatever that algorithm 01:36:18.280 |
with physical fake credit cards, debit cards. 01:36:23.280 |
- Card not present fraud, remember I told you, 01:36:32.520 |
The Ukrainians, again, they can't cash it out. 01:36:41.400 |
So, the deal became, you have to rely on the Americans. 01:36:53.340 |
Send the rest of it over to buy Western Union 01:36:59.720 |
Now, you had a couple of forerunners with E-Gold 01:37:04.320 |
But, back then, it starts out with Western Union, 01:37:12.440 |
and then finally you get to E-Gold, Liberty Reserve, 01:37:26.560 |
So, we started to see, I mean, it's a crazy ass story. 01:37:33.600 |
from law enforcement agencies, government agencies, 01:37:35.640 |
because back then, they didn't know how to shield 01:37:42.060 |
you saw all these, and you're like, that's interesting. 01:37:45.460 |
At the same time, we had, it was called a hack, 01:37:54.140 |
We had a guy that worked at T-Mobile in Los Angeles. 01:38:14.220 |
So, he's getting text messages of the Secret Service 01:38:19.980 |
and he posts those damn things on Shadow Crew. 01:38:21.820 |
So, I'm sitting there going, head of the pile. 01:38:23.900 |
I'm sitting there going, this is not gonna end well. 01:38:35.700 |
and I was using that to create bank accounts, 01:38:38.700 |
and I would sell the bank accounts, stuff like that. 01:38:47.660 |
and started using that to create fake driver's licenses, 01:39:06.260 |
Well, you can use it to create identities all day long. 01:39:09.660 |
My idea was, I wonder if you could take somebody 01:39:14.660 |
that's died and then file for social security death, 01:39:18.460 |
not death benefits, but social security benefits 01:39:20.320 |
for that individual, and get that recurring paycheck in. 01:39:26.780 |
How does the federal government know if you're dead? 01:39:39.780 |
It also turns out, the only way the federal government 01:39:46.100 |
the family had to file a social security death benefit 01:40:01.220 |
the funeral home can do it, or the family can do it. 01:40:03.580 |
So, a lot more people have it filed if they've died. 01:40:16.000 |
So, I started to apply for social security benefits. 01:40:21.780 |
So, they want you to come in for a physical interview. 01:40:26.540 |
You're not gonna pass as a 65-year-old, so no. 01:40:31.600 |
wonder if you could file income tax returns on these people. 01:40:40.460 |
So, I started doing that, and I started to steal. 01:40:44.060 |
Once I got ramped up, 'cause you test everything. 01:40:48.140 |
I gotta figure out what the deposit instrument is 01:41:05.100 |
- So, you find a business, and the way the system worked is 01:41:18.460 |
- And you're keeping the amounts relatively low. 01:41:42.180 |
- So, clicking on, so typing fast and clicking. 01:41:49.340 |
everything else, one return every six minutes. 01:41:57.060 |
plot out a map of ATMs, and then the next two days, 01:42:05.220 |
Turns out that a backpack, I don't see any sitting 01:42:09.020 |
around here, but a backpack will hold $150,000 of 20s, 01:42:25.340 |
First, we started with the volume of coal that weighs a ton, 01:42:32.260 |
and then you can multiply that by five for hundreds. 01:42:37.100 |
most of the time it's 20s coming out of an ATM, right? 01:42:47.300 |
when they get a pallet of cash, they just weigh it. 01:43:02.100 |
do a good run of David Goggins with it, nice, I like it. 01:43:08.580 |
So wait, where does that come in with the backpack? 01:43:11.340 |
- So what happens is, I didn't know how to launder money. 01:43:14.060 |
All right, so I'm throwing cash in the spare bedroom, 01:43:18.900 |
and you're like, gotta do something with those backpacks. 01:43:22.180 |
And that's when you start learning how to launder money. 01:43:25.060 |
You know, cash-based businesses, things like that. 01:43:33.100 |
- Actually, can you pause on that to take a tangent there? 01:43:42.300 |
- This is, by the time the tax return schemes go into play, 01:43:46.880 |
we're talking 2002, 2003 is when tax returns start. 01:43:53.300 |
and what you're aware of now, how it evolved, 01:44:08.100 |
You then start depositing it into bank accounts. 01:44:14.060 |
have bank accounts in the United States, Mexico, Canada, 01:44:24.040 |
And the idea is to try to move them to so many places 01:44:31.200 |
and you can't trace it all if you're ever caught, 01:44:41.820 |
so you have money that needs to be moved to other people. 01:44:54.380 |
- Right, so you do the Ozark thing if you wanna do that. 01:44:57.500 |
So you can gamble, cash out something like that. 01:45:02.580 |
You've got your production company or your detail company. 01:45:13.720 |
Somebody's paying you in cash is what you're doing. 01:45:16.920 |
You have to have enough of those cash-based businesses 01:45:27.780 |
- Okay, so then you start depositing into that. 01:45:36.160 |
came in at $2,500 instead of the 10K that it used to be. 01:45:40.380 |
So all of a sudden, you've got multiple bank accounts 01:45:49.860 |
So a combination of bank accounts, prepaid debits 01:45:53.760 |
that had ACH abilities attached to those as well, 01:46:01.340 |
You can start funneling that into fewer bank accounts 01:46:05.320 |
until finally you've got the one main account 01:46:07.660 |
that's over at Banco Leteco in Estonia at that point. 01:46:33.180 |
that come into play here where he had someone 01:46:48.760 |
Scrip was a kid that he was stealing enough money 01:46:52.820 |
that he was able to buy whatever estate he wanted to, 01:46:55.080 |
and he would brag about touring the countryside, 01:46:57.960 |
and if he saw property that he liked, he would buy it. 01:47:00.920 |
And that was not just a brag, he was doing that. 01:47:05.740 |
At the same time, he's got connections politically 01:47:09.820 |
He's got connections, and that family's got connections 01:47:17.700 |
and he's stealing a lot of money at the same time. 01:47:19.980 |
Somebody doesn't pay him a decent amount of money. 01:47:28.140 |
with Carter Planet, with Counterfeit Library, 01:47:33.680 |
We were just the fraudsters, the social engineers. 01:47:43.120 |
we don't do counterfeit currency, we don't do drugs. 01:47:46.780 |
And the only thing we ended up really obeying 01:47:50.400 |
except for Max Butler, who you mentioned earlier. 01:47:57.180 |
and he comes online on Shadow Crew at that point, 01:48:12.700 |
had the guy tied up, had the guy being tortured, 01:48:22.500 |
And that's the first time that violence came into play 01:48:29.900 |
you start realizing things are getting a little serious. 01:48:44.100 |
Then you're like, no, that's real, that's real. 01:48:55.340 |
If you see that, or was it pretty clear to you 01:48:58.420 |
that that's a line that some people can cross 01:49:04.980 |
- You know, I gotta tell you, I joke with my wife. 01:49:15.980 |
I might be persuaded to ask him for access to that. 01:49:29.860 |
where you're like, I remember who I used to be. 01:49:57.260 |
- You get used to what's going on, and then-- 01:49:59.740 |
- And you figure, you take somebody like Ross Ulbricht, 01:50:08.980 |
But at that point in time, he was sitting on 24 million 01:50:28.700 |
You know, it was a blackmail on him and everything. 01:50:29.980 |
So Ross thinks he hires a couple hitmen to kill the guy. 01:50:46.380 |
- And also when you're, it's not just about money, 01:50:50.320 |
Like if you're threatened for your wellbeing, 01:50:56.340 |
all of us operate under different motivations. 01:50:59.380 |
- Plus that online aspect with those communities like that, 01:51:22.380 |
trade things, everything from child pornography to drugs, 01:51:32.620 |
- What are the dark things that humans want to do 01:51:55.620 |
other than dealing in all these stolen wares, 01:52:01.780 |
what Shadow Crew did that's really important. 01:52:05.020 |
Remember those three necessities that I talked about? 01:52:09.540 |
is it established trust among criminals, all right? 01:52:14.380 |
You have to be able to trust who you're dealing with 01:52:21.260 |
So how do you know you're not dealing with a cop? 01:52:23.500 |
How do you know you're dealing with somebody that's skilled? 01:52:25.540 |
How do you know you're gonna deal with somebody 01:52:27.980 |
You have to be able to trust that individual. 01:52:30.060 |
The Shadow Crew provided that trust mechanism for criminals. 01:52:32.980 |
You had that communication channel, the forums, 01:52:37.720 |
weeks, months old, take part, learn from those conversations. 01:52:41.320 |
You had vouching systems and review systems in place, 01:53:01.240 |
And that's really interesting when you think about it. 01:53:06.580 |
almost this instantaneous information that was available 01:53:12.640 |
about the community or about cybercrime at large. 01:53:25.600 |
The other one was the Tor browser, the dark web. 01:53:38.840 |
And it was like, we really need to be careful with this. 01:53:45.640 |
and it turns out it was, this was 2005, early six. 01:53:58.240 |
Tor browser is a way to be completely anonymous. 01:54:01.440 |
- As long as you properly know how to use it. 01:54:13.280 |
- US Navy, to this day, the number one funder of Tor? 01:54:35.200 |
starts sponsoring and everything else like that. 01:54:40.160 |
people can get around their country's firewalls, 01:54:48.000 |
if you can use it to launder money or remain anonymous, 01:54:52.880 |
And so criminals start to use the damn thing, all right? 01:54:56.660 |
So along the same time we get, well, a few years later, 01:55:00.040 |
we get Satoshi Nakamoto pops up with his ideas for Bitcoin, 01:55:07.660 |
Ross Ulbricht decides he's gonna start up Silk Road. 01:55:15.100 |
people were using Tor or just talking with each other, 01:55:25.920 |
and they have a lot of trouble finding the box. 01:55:28.960 |
So that is the advent of Silk Road all of a sudden. 01:55:36.740 |
by becoming the largest drug dealer on the planet. 01:55:42.580 |
and the only payment instrument he allows is Bitcoin. 01:55:54.100 |
it could be 100,000 or 10,000. - Absolutely, absolutely. 01:56:06.060 |
because that statement would be ridiculously wrong 01:56:12.720 |
- People 100 years from now will be laughing. 01:56:20.100 |
and that's, of course, the initial use case of crypto 01:56:26.540 |
but the initial use case is we're going to buy a bunch of pot. 01:56:30.820 |
We need somebody, we need a way to pay for it. 01:56:38.740 |
If you look at motivations of cyber criminals, 01:56:43.180 |
the motivations are status, cash, ideology, all right? 01:56:47.980 |
My guys, all cash, across the board, all cash. 01:56:54.640 |
He really believed he was going to change the world. 01:57:17.060 |
It's not, you know, the cash guy, it's low-hanging fruit. 01:57:21.640 |
The ease of, it's hard to stop committing crime, 01:57:26.300 |
but it's much easier for a cash-motivated individual 01:57:47.700 |
are committed with people that operate under ideology. 01:57:59.660 |
But think about the amount of cognitive dissonance 01:58:04.760 |
he's gonna change the world by running a drug site. 01:58:08.300 |
I mean, certainly, I mean, could he have changed the world? 01:58:24.140 |
You know, there's a lot of people that argue. 01:58:32.820 |
who actually argues that all drugs should be legalized, 01:58:35.180 |
and not at a philosophical level, political level, 01:58:37.460 |
but the fact that all the negative consequences of drugs 01:58:48.300 |
- And so that's a, okay, but that's more like a argument 01:58:53.640 |
I think the ideology comes in where it's like, 01:58:59.300 |
You should be, you should have the responsibility 01:59:03.100 |
The government or any other institution shouldn't be 01:59:08.700 |
the rule setters, the constraints for how you live your life. 01:59:14.580 |
And so that, I could see that argument being made, 01:59:17.160 |
and ultimately if you like create an open market for drugs, 01:59:24.620 |
it might break down the outdated, the corrupt, 01:59:38.180 |
We do have this whole thing called cryptocurrency. 01:59:46.900 |
- And that might have been for it to take hold in society, 01:59:57.320 |
Shadow Crew, we had this guy, Albert Gonzalez, 02:00:25.920 |
So, an associate of mine by the name of Kim Taylor, 02:00:46.780 |
And he starts selling credit cards after a while 02:00:51.620 |
And that CB1 breach, where you're cashing out 02:01:01.200 |
So Albert's in New Jersey one day, broad daylight, 02:01:06.860 |
and stands at an ATM for 40 minutes, just standing there, 02:01:23.920 |
And they start noticing this kid just standing there. 02:01:28.340 |
So 40 minutes they watch this kid, 40 minutes. 02:01:39.260 |
He's got the disguise on, everything else like that. 02:02:07.580 |
All right, they had no clue what was going on. 02:02:10.940 |
that they were working through, is one way to put it. 02:02:14.820 |
We're fucking idiots is another way to say it. 02:02:18.980 |
- So they're just like not aware of this digital world. 02:02:23.100 |
The way that Albert tells them how to catch us, 02:02:26.180 |
because they looked at him, "How do we catch him?" 02:02:28.660 |
And Albert's like, "I'm serious, I'm serious." 02:02:32.460 |
So Albert's like, "Well, you could try a VPN." 02:02:43.940 |
I was worried about all the news that was coming in 02:03:00.420 |
the text messages about the Secret Service investigators 02:03:04.140 |
so the pressure's building, it's not gonna end well. 02:03:09.120 |
So I announced my retirement of February 15th, 02:03:13.600 |
oh, I'm sorry, April 15th, 2004 is my retirement. 02:03:31.740 |
he's kind of on the run, which if you wanna know that story, 02:03:36.900 |
So my second in charge, Kim Taylor, this guy, 02:03:49.080 |
David Thomas, David, yeah, yeah, he was a film guy. 02:03:58.420 |
he's on the run out of Nebraska for check fraud. 02:04:02.460 |
He comes to us on Shadow Crew, telling us this sad story. 02:04:06.300 |
We take up a collection for this guy, send it to him. 02:04:10.600 |
I get him a job working with a low level carter, 02:04:15.320 |
El Mariachi, or Thomas does this for a few weeks, 02:04:23.420 |
Well, I had a Ukrainian guy by the name of Big Buyer. 02:04:27.140 |
He, real friend of mine, and I contacted him, 02:04:31.420 |
that wants to do some work, can you help the guy out? 02:04:43.360 |
to Issaquah, Washington, and rent an office space. 02:04:48.540 |
So Thomas goes up there, rents his office space, 02:04:50.980 |
him and his girlfriend, rents an office space. 02:04:53.560 |
And the plan is, is Big Buyer is going to place an order, 02:04:59.380 |
get products sent, Mariachi's going to get the product 02:05:11.960 |
The largest order Outpost.com had ever received 02:05:20.620 |
- Goes through, he gets the product, all right? 02:05:35.000 |
in Denver, Colorado, is where he works at this point. 02:05:40.740 |
All right, he's even got one of the screen names 02:05:43.720 |
So I'm like, all right, so Mariachi's telling us 02:05:46.420 |
how much money he's making and everything else. 02:05:48.300 |
I'm like, well, that's good, I'm glad you're all right. 02:05:50.360 |
Kim contacts me, he's like, I wanna go to Issaquah. 02:06:14.300 |
They're just celebrating, partying, drinking, 02:06:17.780 |
Meanwhile, Big Buyer has placed another order 02:06:34.520 |
Outpost knows the first order was fraudulent. 02:06:41.200 |
So Outpost picks up the phone, calls Issaquah PD. 02:06:46.560 |
Issaquah's like, would you mind sending some empty boxes? 02:06:58.280 |
if you've got full account access, you place the order. 02:07:03.720 |
you sign into the bank account or the credit card account. 02:07:06.240 |
If you can sign in, you go pick up your product. 02:07:09.200 |
If you can't sign in, you go back to sleep that day. 02:07:13.760 |
Well, Big Buyer was the guy who placed the order. 02:07:16.360 |
Mariachi and my second in charge are partying. 02:07:26.920 |
getting up with me like, hey, where are the guys? 02:07:37.440 |
So Mariachi's got a Cadillac, old '70s Cadillac. 02:07:57.560 |
Mariachi just happens to glance over and he sees a van 02:08:16.720 |
So he walks in, looks at the guy behind the counter. 02:08:29.760 |
David Thomas is in the car watching all this happen. 02:08:32.480 |
He bugs out and they arrest him on the interstate 02:08:37.000 |
where he has three fake driver's licenses in his wallet 02:08:40.240 |
along with his real driver's license, another no-no, 02:08:44.180 |
So David Thomas had outstanding warrants out of Nebraska. 02:08:50.160 |
Kim Taylor didn't have any warrants, so we bonded him out. 02:08:53.840 |
My third in charge, Kidd, Seth Sanders was his name. 02:08:59.920 |
He bonds him out, uses his girlfriend's account 02:09:08.480 |
where another friend of mine agrees to house him, 02:09:30.480 |
"is popping ecstasy tablets every day, all day." 02:09:38.860 |
By this point, I've got another crew that's coming through. 02:09:42.440 |
Had another crew that's coming through Denver, 02:09:45.360 |
send Kim back to Denver to partner up with these guys. 02:09:54.800 |
I just wanna throw my hands up in the air and walk away. 02:09:57.940 |
So my retirement's coming up at the same time. 02:10:06.120 |
and the mods there, I'm like, "This is what's going on. 02:10:17.860 |
Kumbajani, Albert Gonzalez, comes back into play. 02:10:24.100 |
He starts banning everyone that's suspicious of him. 02:10:31.440 |
"I need all transactions to go through this VPN." 02:10:38.420 |
Secret Service ends up, I think they ended up cataloging 02:10:45.160 |
Shadow Crew makes the front cover of Forbes, August 2004. 02:10:52.600 |
October 26, 2004, United States Secret Service arrest, 02:11:00.360 |
I was in Charleston, South Carolina when I saw it happen. 02:11:08.460 |
- I'm the one public, there were a couple other guys 02:11:10.260 |
that got away that they didn't publicly mention. 02:11:39.300 |
Ukrainian cops get in the car, go down and tell Tron, 02:11:45.340 |
- (laughs) So he bugs out down to South America 02:11:48.860 |
for six or seven years after that, something like that. 02:11:53.500 |
- Well, let me actually ask you on this point. 02:12:06.300 |
because honestly, very few people are arrested, all right? 02:12:10.220 |
But it doesn't end well because of the type of person 02:12:14.860 |
You quoted me earlier, you lie to everybody around you. 02:12:20.700 |
You lie to yourself, you lie to your friends, 02:12:23.340 |
you lie to your family, of course you lie to your victims. 02:12:42.620 |
I lied to her every single day of those nine years. 02:12:59.940 |
I thought I had friends, I lied to all those people 02:13:02.020 |
that I knew that thought they were my friends. 02:13:09.720 |
I don't think a lot of people really understand 02:13:14.240 |
You know, you talked about, you pointed out that woman 02:13:17.240 |
that I ripped off, she was trying to put a roof 02:13:42.960 |
Simple, real friendship, all of those things. 02:13:57.960 |
whether it be drugs, crime, gambling, what have you, 02:14:01.760 |
you cannot love anything else except the addiction. 02:14:20.540 |
And I tried to convince myself that I'm a businessman, 02:14:28.640 |
So those lies become part of it, everything else. 02:14:32.140 |
Yeah, you get the higher-ups are usually arrested, 02:14:49.520 |
He was a miner, a very talented individual, very competent. 02:14:54.320 |
He had, as a kid, he had broke into NASA, DOD, Pentagon. 02:14:59.080 |
He shut the NASA computers down for six weeks. 02:15:03.500 |
Then he decides he wants to go into credit card theft, 02:15:06.140 |
partners with Albert, he's arrested with Albert. 02:15:15.980 |
So this kid gets up one day, he wasn't in prison yet. 02:15:19.280 |
He gets up one day, goes in his dad's bedroom, 02:15:31.240 |
and you're gonna end up like Scripps did with that guy, 02:15:37.260 |
No one knew who, two people ran that, a guy and a girl. 02:15:54.860 |
the negative thing is you really become somebody 02:16:01.540 |
that, I mean, just truly a despicable human being. 02:16:07.360 |
when you're destroying people's retirement accounts, 02:16:13.360 |
that simply wants to do something good for her family. 02:16:23.240 |
I got to the point, I had one guy ripped off, 02:16:27.600 |
this is when I first started the cybercrime stuff. 02:16:37.460 |
And he was like, the email said something like, 02:16:42.460 |
"I guess you needed the money, and it's okay. 02:16:48.860 |
And I'm getting chills right now thinking about it, 02:16:51.820 |
but it's that, where you become that individual, 02:17:26.640 |
- Even Brad Pitt, who makes a brief appearance, is genius. 02:17:41.640 |
You know, I lied to my wife for nine years until she leaves. 02:17:57.500 |
and sometimes she'd go and be gone a few hours 02:18:17.160 |
- Absolutely, 'cause you trust 'em, you know. 02:18:20.600 |
- You should be tracking all their movements, 02:18:36.760 |
And I sat there looking at it and I was like, "Well, shit." 02:18:46.680 |
And she wakes up, she's like, "Where are you going?" 02:18:54.680 |
I took about a week of both of us crying and arguing 02:19:15.200 |
and was smart enough to do something about it. 02:19:19.840 |
And that's where there's always this sense of humor. 02:19:24.720 |
I'm like, "Psychologist, criminal psychologist, 02:19:32.200 |
I mean, crying on the phone, told her everything. 02:19:44.000 |
She was trying to get me to stop breaking the law 02:19:48.880 |
And I remember telling her, "Is there a difference?" 02:20:02.200 |
I'd never done drugs, anything else like that. 02:20:07.040 |
So I was this guy that always wanted to be in control. 02:20:22.400 |
It was Joe's Roundup in Charleston, South Carolina. 02:20:32.320 |
So I walked in, and I'm literally that guy, man, 02:20:57.800 |
And she's like, "Would you like to get a bottle of champagne?" 02:21:01.000 |
I was like, "Does that mean going in back or what?" 02:21:03.160 |
She's like, "Well, yeah, you need to do the bottle 02:21:05.720 |
I'm like, "Sure, let's buy a bottle of champagne. 02:21:13.280 |
So then again, that bravado disappears pretty quickly. 02:21:22.840 |
strippers are their therapist most of the time, all right? 02:21:46.120 |
- And there's no damp feeling of love and all that. 02:21:48.800 |
- Yeah, so just talked, just got along pretty good. 02:22:01.680 |
I said, "That was my first time to a strip club." 02:22:38.920 |
So we start doing the lunch and the dinner thing. 02:22:46.760 |
I was 34, she was 23, and got along really well. 02:22:51.840 |
Listened, had common interest in music and arts 02:23:09.960 |
- Yeah, we got along really well, really well. 02:23:16.440 |
And what was happening was she was working weekends 02:23:25.320 |
She wouldn't come home until 10 or 11 in the morning. 02:23:30.240 |
And most of the time it would be a phone call 02:23:32.840 |
saying, "Come and pick me up, I can't drive home." 02:23:35.920 |
And then I'd never used drugs, had never been around. 02:23:47.240 |
I'm kind of getting head over heels with her. 02:23:54.280 |
I'd never went through a woman's purse in my entire life. 02:24:00.960 |
and I'm like, "I gotta know what the fuck's going on." 02:24:04.440 |
And went over and went through her purse, found cocaine. 02:24:09.440 |
And the straw, cut off straws and all that stuff. 02:24:17.440 |
Got online and I'm the guy that can find information. 02:24:23.360 |
So I started looking for forums on strip clubs. 02:24:41.360 |
I was talking about everything she was doing to do that. 02:25:02.640 |
And she's like, "Well, you think I'm prostituting?" 02:25:18.040 |
and continued to do it for a couple more weeks. 02:25:28.720 |
Before I picked her up, I had written her a note, 02:25:32.840 |
So I brought her home, tucked her in the bed, 02:25:46.760 |
"If you can't stop this, don't be here when I get back." 02:25:55.040 |
Came back that night and she had quit her job. 02:26:26.640 |
That became, to me, because of my background, 02:26:37.520 |
And so every night was $300 to $600 for dinner. 02:26:49.520 |
I had most of my money laundered out to Estonia. 02:27:14.280 |
I guess she was scared she might go back to something. 02:27:28.480 |
I can't go into committing tax fraud because season's over. 02:27:38.120 |
I'm left with running counterfeit cashier's checks 02:27:58.680 |
And at the same time, she couldn't be intimate. 02:28:19.760 |
- So, she couldn't be intimate unless she was stone-cold drunk. 02:28:32.980 |
And I, you know, shit, I didn't mind her drinking alcohol. 02:28:52.880 |
You know, that just keep going, she'll be all right. 02:29:06.520 |
she thought I had money, she thought I had money. 02:29:09.600 |
She wanted a couple of Tiffany engagement rings. 02:29:13.800 |
You know, I figured marriage, show her that I love her, 02:29:21.320 |
She's like, well, I've always wanted a Tiffany ring. 02:29:23.880 |
Shit, I didn't have money to buy the Tiffany ring 02:29:26.920 |
So here I am, I defraud, so it's counterfeit cashiers. 02:29:31.220 |
I find a, like a three carat ring on eBay for 20 grand. 02:29:36.660 |
And pay for it with a counterfeit cashier's check. 02:29:40.540 |
At the same time, because she doesn't want me to leave, 02:29:45.820 |
Typically, if you're doing that type of crime, 02:29:51.580 |
because you're gonna be identified pretty quickly. 02:29:57.140 |
So start running counterfeit cashier's checks 02:30:16.480 |
February 8, 2005, I've got a Tiffany wedding band, 02:30:26.380 |
And I get arrested in Charleston, South Carolina. 02:30:34.340 |
I told her, I said, "I've gotta go pick up those rings." 02:30:40.700 |
And I said, "We'll go out to dinner after that." 02:30:43.220 |
And I left at like eight o'clock in the morning. 02:30:46.920 |
And I was arrested at, I think 1130, something like that. 02:31:00.560 |
There were like 30 agents in the parking lot. 02:31:05.660 |
Within 45 minutes, the Secret Service comes in, 02:31:18.620 |
And I was like, "Look, I'll sign off on the search 02:31:20.980 |
"if you let me go with you so I can see her." 02:31:28.900 |
I had like 140 calls where she had been trying 02:31:40.480 |
I mean, you talk about 10, 12 cars, 40 agents, 02:31:58.780 |
And I knock on the door and tell her the police are there 02:32:03.860 |
So she does and they come in and just start ransacking. 02:32:13.780 |
- Were you able to say a word or two to help her understand? 02:32:18.180 |
And at the same time, they take a watch off her wrist, 02:32:27.380 |
Bang, bang, bang, bang, bang across the board. 02:32:38.460 |
I said, "I'll see what's going on, but don't show up." 02:32:42.420 |
Of course, she's there the next morning, her and her dad. 02:33:03.120 |
It's like 10, 12 charges a day at that point. 02:33:10.300 |
And I'm trying to call her to make sure she's all right. 02:33:19.020 |
And during that three months, she visits twice. 02:33:45.860 |
two Secret Service guys, pull me out of cell, 02:34:35.980 |
The person that I call immediately is Elizabeth. 02:34:49.060 |
I'm in the parking lot of the Charleston County Jail. 02:34:52.480 |
Me and a Secret Service agent standing there. 02:34:55.900 |
And Elizabeth had a friend that owned a limo company. 02:35:40.120 |
The agent had to pay for my hotel room that first night. 02:35:43.860 |
So he drops me off after paying for the hotel room, 02:35:59.480 |
She comes to see me and we talk most of the night 02:36:20.540 |
The field office is in Columbia, South Carolina. 02:36:27.200 |
Even before I start working with them, I'm breaking the law. 02:36:33.760 |
the field office, they got this big war room in there. 02:36:38.900 |
laptops hooked up to a 50 inch plasma monitor on the wall. 02:36:43.220 |
They've got a desktop sitting directly next to me, 02:36:51.280 |
with a South Carolina law enforcement officer. 02:36:54.000 |
My job is four to six hours a day, surfing the web, 02:37:04.780 |
For the first two weeks, they are extremely diligent. 02:37:09.220 |
They pay attention to everything that's going on, 02:37:12.040 |
But the problem is, is that that shit gets boring real quick 02:37:20.460 |
So they're like, "What the hell is he doing?" 02:37:22.620 |
And it gets tiring looking at a guy just doing that shit. 02:37:28.940 |
and they start watching porn instead of watching me. 02:37:43.880 |
Every night it goes on a DVD-ROM on a spindle. 02:37:47.000 |
So I'm like, "They're not gonna go through that shit." 02:38:02.660 |
At the same time, the relationship with Elizabeth 02:38:33.080 |
She was like, she had told one of her friends 02:38:42.840 |
she told one of her friends that I was the only guy 02:38:58.780 |
- And that she chose to do it and she chose to stop. 02:39:10.960 |
And as far as I know, she's never been married. 02:39:25.540 |
By the way, can I just say how just moving it is, 02:39:51.640 |
So we started going to strip clubs and she'll come back 02:39:54.200 |
and be getting wasted and we'll have sex, what have you. 02:39:58.080 |
And one night she looks at me and she was like, 02:40:16.520 |
I was like, to me, that was the final straw right there. 02:40:39.080 |
And I looked at her and I said, "It's over, we're done." 02:40:45.800 |
"Whatever you want, we're renting an apartment." 02:40:49.560 |
I was like, "Whatever you want in here, take it." 02:41:10.360 |
So I go to work that day at the Secret Service, 02:41:15.000 |
come back that night and she's taken everything 02:41:19.240 |
and left a picture of herself in the bedroom on the floor. 02:41:31.400 |
So I've given her a thousand dollars like every two weeks 02:41:40.200 |
'cause I'm doing this tax fraud from inside the offices. 02:41:43.600 |
Well, the debit card companies are pinging the cards. 02:41:55.000 |
So I start not to have the money to send to her. 02:42:02.960 |
And I was like, "Well, look, I'm doing what I can. 02:42:06.840 |
And I was like, "Look, if you knew what I was doing 02:42:09.280 |
to get this money, you wouldn't be asking that." 02:42:20.400 |
So I pick up the phone, call the rental office. 02:42:29.800 |
She's like, "Oh no, that rent's paid up three months." 02:42:32.480 |
It's like, "Okay, hang up, call Elizabeth back." 02:42:41.840 |
They just said you're up on it three months." 02:42:52.440 |
I was like, "But look, I can't do it anymore." 02:42:54.760 |
And that's the last time I spoke to her, right there. 02:43:01.440 |
is I was breaking the law from inside the offices. 02:43:19.360 |
I told him if I ever went missing not to contact me. 02:43:22.400 |
And so I go missing, then I show back up online. 02:43:29.960 |
And they identify him pretty quickly at that point. 02:43:33.200 |
He's set to be arrested sometime in March of six. 02:43:40.920 |
Operation Rolling Stone was the name of the operation. 02:43:43.160 |
Nine people were supposed to be arrested that night. 02:43:49.960 |
They search his apartment and don't find anything. 02:43:53.720 |
The apartment manager comes out and explains to him 02:43:56.360 |
how Sean has done all kinds of work to the apartment. 02:44:01.760 |
worth of Italian tile to put in the apartment 02:44:06.000 |
And by the way, last night he had a U-Haul out here 02:44:18.560 |
And my answer was, I ain't taking a polygraph. 02:44:23.280 |
So they're like, well, we'll throw you back in jail 02:44:31.600 |
He's like, but they will throw you back in jail. 02:44:41.280 |
And he's like, well, you can try to pass the polygraph. 02:44:52.400 |
The questions were, have you talked to anybody? 02:44:56.440 |
Have you been on a computer outside of the offices? 02:45:00.440 |
which I was interviewing with a New York Times writer 02:45:03.800 |
And then have you contacted or warned anybody 02:45:11.120 |
Take me back down to Charleston County, throw me in a jail. 02:45:15.160 |
Three days later, Secret Service shows back up 02:45:23.360 |
And they were, I mean, honestly, they were good men. 02:45:27.320 |
And they gave me chances upon chances to do the right thing. 02:45:40.520 |
Later on, a couple of years ago, I had a chance to, 02:45:51.400 |
And I told him I was sorry for everything I did to him 02:45:58.120 |
And I told him I was sorry for what happened. 02:46:01.400 |
And he told me then, he's like, "We were your friends, man. 02:46:13.360 |
And what got me so damn bad is I told him, I was like, 02:46:19.520 |
And he's like, "Brett, you always were a good guy. 02:46:39.640 |
He's got the Miranda waiver in front of him, right? 02:46:43.360 |
And he looks at me, he's like, "I'm playing hard ass. 02:46:49.440 |
And Jim's like, "Here's the way this is gonna work." 02:46:52.880 |
He said, "You're gonna tell me everything you've done 02:46:55.280 |
"the past six years, or I'm gonna make up my mission 02:47:15.920 |
He was like, he gets up, gets all red in the face, 02:47:19.360 |
storms out, on the way out, he's like, "Fuck you very much." 02:47:24.800 |
A week later, I was only under state charges. 02:47:28.360 |
A week later, judge rules they revoke the bond improperly. 02:47:37.880 |
nobody calls the Secret Service to tell him I walk out. 02:47:55.480 |
I'd given her like 60K, some bullshit like that. 02:47:58.640 |
And I told her, I was like, "Kim, I need some money." 02:48:20.400 |
There was a prepaid debit card supplier in Dallas. 02:48:27.440 |
convinced the guy to give me 60 prepaid debit cards 02:48:35.300 |
I ended up stealing, from that, I stole like 160K profit, 02:49:01.560 |
the night before I had stolen 160K out of ATMs. 02:49:21.320 |
Nobody knew my real name in that environment at all, 02:49:25.120 |
And it was talking about me being part of the Secret Service, 02:49:40.720 |
you've made the United States Most Wanted list, 02:49:59.800 |
one to Disney World, the other one to Universal Studios. 02:50:22.920 |
They had seized a DVD collection of mine worth 30 grand, 02:50:28.360 |
and proceeded to go to Disney World every day. 02:50:35.320 |
They used a trigger fish, is what they use nowadays, 02:50:42.000 |
So one day I was, it was like 10.30 in the morning 02:50:44.880 |
on Saturday, September 16th was the day, 2006. 02:50:50.920 |
I was used to the builders coming around, knocking, 02:50:55.920 |
So I was asleep, heard this knock at the door, 02:50:59.200 |
and get up, look through the keyhole, nobody's there, 02:51:14.640 |
And they turn around, and they're like, "Hey, Brett." 02:51:20.960 |
And I'm like, "I'm fine, would you like to come in?" 02:51:25.520 |
And I was like, "That's probably a good idea." 02:51:34.600 |
And I was like, "Yeah, there's $120,000 in the bedroom." 02:51:42.280 |
His face goes white, and he's like, "You got a rifle?" 02:51:57.280 |
And diesel therapy is, it took like two weeks 02:52:06.480 |
And what happens is, is you stop at every county jail 02:52:13.160 |
Once you get to your bunk, hey, time to transport ya. 02:52:21.640 |
Wears you down mentally and physically and everything. 02:52:32.720 |
this inmate, he looks at me, his name was Yeti, 02:52:35.240 |
and he's like, "Hey man, you know the only time 02:52:37.600 |
"you get off in federal prison is the drug program." 02:52:42.400 |
And he's like, "You can find a drug problem, can't ya?" 02:52:48.760 |
So what happens is, is every county jail I stop at 02:52:51.600 |
on the way to Columbia, I tell 'em I'm alcoholic and cocaine. 02:52:56.600 |
So by the time I get to Columbia, South Carolina, 02:53:04.880 |
I had hired Strom Thurman's son as an attorney. 02:53:15.960 |
He gets a psychological evaluation ordered for me. 02:53:23.680 |
he looks at me, he's like, "You use any type of drugs?" 02:53:40.080 |
And he looks at me and I'm looking at him like, 02:53:43.520 |
'cause I had gotten that shit from Boogie Nights. 02:53:55.520 |
So that makes it into my pre-sentence report. 02:54:03.640 |
and prosecutor, they do this detailed background check 02:54:07.040 |
to basically tell the judge how much time to give you. 02:54:09.840 |
So that drug bit with that interview makes it into the PSR. 02:54:14.600 |
So day of interview, I mean day of sentencing, 02:54:28.840 |
the Secret Service, he's manipulated the prosecutor." 02:54:33.040 |
"And he's manipulating you today, your honor. 02:54:35.640 |
We insist on the upper limits of the guidelines." 02:54:38.440 |
Well, I had been telling everybody in the jail 02:54:40.520 |
that if they give me any more than 60 months, 02:54:47.960 |
So the judge looks at me and she's like, "I agree." 02:55:05.480 |
The judge says, "No, but I'll recommend he gets evaluated." 02:55:09.320 |
So the Secret Service had told her, "Hey, he's full of shit." 02:55:12.920 |
So she's like, "No, but I'll recommend he gets evaluated." 02:55:15.000 |
I looked at my lawyer and I was like, "What does that mean?" 02:55:16.920 |
He was like, "You're probably not gonna get it." 02:55:18.640 |
And I was like, "How soon can you get me to the camp?" 02:55:26.200 |
My exact words were, "Fuck the appeal, get me to the camp, 02:55:31.760 |
He looks at me like I'm the biggest idiot in the world. 02:55:35.360 |
I get sent to, 'cause you can get a camp recommended. 02:55:38.400 |
I have friends, family members look for camps 02:55:49.120 |
And pull up there, 14 foot fence, razor wire on top. 02:56:08.080 |
He was like, "Well, you could do landscaping." 02:56:13.360 |
Two days later, I walk into the landscaping office 02:56:25.440 |
is a blown up photo of the compound and the outlying area. 02:56:29.720 |
So I can literally sit there and plot where I'm going. 02:56:35.000 |
My dad, I hadn't spoken to that man in years. 02:56:49.720 |
He can lip with me when he gets out, everything else." 02:56:54.800 |
And I just thought it was bullshit at the time. 02:57:02.320 |
And about the third visit in, he looks at me, he's like, 02:57:12.560 |
He's like, "You think you can teach somebody how to do that?" 02:57:43.320 |
being that criminal with my mom, everything else. 02:57:49.920 |
- He wanted to connect with you in the places 02:58:01.920 |
So I agreed to teach him how to do tax fraud. 02:58:04.240 |
And in return, he had, the only money he had to his name, 02:58:18.320 |
So I was at the camp for, I don't know, six, eight weeks. 02:58:22.720 |
And the hardest worker that landscaping had ever seen. 02:58:26.840 |
At one point, the cops got me on a mountainside 02:58:34.160 |
- So you're building trust with the guys there. 02:58:47.600 |
US Marshals, they're canvassing a three-state area. 02:58:55.120 |
because I had to use my real driver's license. 02:59:34.840 |
Then he pulls out this badge and he points at it. 02:59:37.480 |
He's like, and then he points at the door, "Now." 02:59:54.560 |
- So it's like a traditional, like they were just tracking-- 03:00:03.480 |
- US Marshals are outstanding in everything they do. 03:00:06.720 |
I go to a, I'm initially held at a county jail 03:00:11.280 |
And that, man, that was one hell of an experience there. 03:00:14.640 |
But then I'm transferred after sentencing on that. 03:00:20.360 |
So I spent like, I think, two or three months 03:00:33.520 |
that they use the exact same pre-sentence report. 03:00:36.360 |
The report that's got all that drug shit in there. 03:00:42.080 |
Secret Service is there, judge me, my attorney. 03:00:48.800 |
"Your Honor, we would like it if you would consider 03:00:54.000 |
"he had a laptop, he had all this information with him, 03:00:56.480 |
"looks like he was engaged in identity theft yet again." 03:01:03.480 |
Says, "Hey, if you were gonna charge him with it, 03:01:08.520 |
Then he looks at me, and he's like, "Mr. Johnson." 03:01:11.600 |
He said, "It looks like by you keeping your mouth shut 03:01:20.440 |
And he was like, then he opens up the pre-sentence report, 03:01:26.840 |
"with all these drugs, you were a pretty good citizen." 03:01:33.240 |
And he's like, "So here's what I'm gonna do." 03:01:34.800 |
He said, "I'm gonna give you 18 months on the escape." 03:01:42.360 |
He said, "I'm gonna give you 15 months on the escape." 03:01:54.920 |
and it gives you six months and halfway house. 03:01:59.240 |
So by escaping, I got out of prison three months earlier 03:02:05.520 |
- So the original thing about drugs worked in the long- 03:02:15.600 |
I spent eight months in solitary confinement, okay? 03:02:23.100 |
'Cause you ain't got no books for the first month or so, 03:02:52.240 |
You're sleeping 16, 18 hours a day is what you're doing. 03:03:06.740 |
- Yeah, going through every single bit of that. 03:03:08.880 |
And so you're supposed to get out an hour a day. 03:03:12.960 |
Law says you're supposed to get out an hour a day. 03:03:21.580 |
You take a shower twice a week and that's it. 03:03:36.520 |
You're bouncing off the walls that first week 03:03:38.480 |
'cause you can't sleep, can't do anything else. 03:03:43.680 |
When that book does arrive, you're happy as hell to have it. 03:04:13.120 |
No kidding, it gets so hot that warnings come on the radio 03:04:22.500 |
So if you've seen the movie "From Dusk Till Dawn," 03:04:32.600 |
So, and that's where I find out what a real prison is. 03:04:38.520 |
Prisons are ran by inmates, and that's a fact. 03:04:41.720 |
So you're met at the door by whatever race you are, 03:04:48.320 |
So Big Spring is a converted Air Force compound. 03:04:55.360 |
I go through processing, and I'm walking up to the unit, 03:05:00.200 |
and I'm met at the door by a guy named Nick Sandifer. 03:05:13.800 |
Next question is, "What are you in here for?" 03:05:17.440 |
My answer was, 'cause I'm like, "I ain't got no worries." 03:05:19.360 |
My answer was, "Computer crime," smiled at him. 03:05:25.760 |
because computer crime is not credit card theft 03:05:30.120 |
Computer crime in prison is child pornography. 03:05:50.800 |
They're like, "What'd you say you're in here for?" 03:05:53.400 |
So I'm sitting there trying to explain it to 'em. 03:05:55.760 |
They're like, "You know, you tell a good story. 03:05:59.160 |
Now, computer crime basically really does mean 03:06:06.480 |
And what you see, and that's one of the things you find out, 03:06:08.280 |
the guys that are going in there for child porn, 03:06:20.840 |
you don't exactly look like the typical computer hacker. 03:06:31.480 |
But it's like it doesn't make it seem like you're, 03:06:50.920 |
you don't get transported with paperwork because of that. 03:06:55.520 |
or a guard will tell them what you're in there for. 03:07:02.400 |
So none of the guards told 'em that I was anything. 03:07:17.640 |
He does an article about that, shows up in Wired Magazine. 03:07:24.880 |
You would think, you would think it saved me. 03:07:27.240 |
So I'm reading the article, really happy about it. 03:07:29.660 |
So what happens is four o'clock is mail call. 03:07:49.560 |
- Which is right up there with the pedophiles. 03:08:00.960 |
Warden, next day, shuts down the entire compound. 03:08:07.160 |
you got the counselors there and everything else. 03:08:10.040 |
"Did you give an interview to Wired Magazine?" 03:08:13.880 |
He's like, "Do you not know they will kill you in here?" 03:08:21.800 |
Well, I know if you tell me you don't feel safe, 03:08:28.640 |
You start to see shit in solitary after a while. 03:09:08.560 |
I was like, "Right there is what you're looking for." 03:09:21.280 |
He's like, "Until someone gets here you snitched on, 03:09:28.120 |
He's like, "But I need you to do something for me." 03:09:32.080 |
All right, so in federal prison, you gotta have a job. 03:09:36.080 |
Doesn't matter what you do, but you gotta work. 03:09:37.560 |
I got a job in education teaching a lit class. 03:09:50.280 |
Had a couple guards every now and then popped in. 03:09:54.840 |
No, we taught fraud every Wednesday, 6 to 8.30 p.m. 03:10:04.680 |
The other job, you get to the point, it's weird, man. 03:10:07.800 |
You get to the point, people walking off the bus. 03:10:13.960 |
You know who the bank robbers are, immediately. 03:10:18.080 |
you're like, "That motherfucker's a bank robber." 03:10:20.360 |
And you know who the pedophiles are, immediately. 03:10:36.880 |
"But if you got some sort of fucked up charge, 03:10:42.000 |
"If you tell me, everything's gonna be all right. 03:10:46.240 |
"If you don't tell me, you see those guys over there? 03:10:52.520 |
"and then they find out you're in here on something, 03:10:59.600 |
Pedophile, rapist, anything that harms children, 03:11:10.440 |
Even if you have the division between races on all that, 03:11:22.000 |
depending on the, it depends on the security class 03:11:27.640 |
But at that prison, what that looked like was, 03:11:37.300 |
You don't associate with anyone except your own type. 03:11:40.740 |
If you do anything like this, we will kill you. 03:11:44.640 |
If someone wants to extort you, we will do that too, 03:12:05.120 |
And it's like, okay, don't mess with him, all right? 03:12:11.760 |
and that would come with those types of consequences. 03:12:35.720 |
and inside of the track you got two handball courts. 03:12:41.620 |
you, all of us would be walking, doing our exercises, 03:12:45.160 |
and at the top of the key, like a flock of birds, 03:12:47.680 |
you'd see all the inmates start to migrate down 03:12:52.000 |
So the first time you see that, you see that migration, 03:12:56.340 |
and this other, one of the inmates got another inmate down, 03:12:59.900 |
and he's just hammering his head right into the pavement, 03:13:07.440 |
So a guard, it's 15 minutes coming out to stop that, 03:13:15.260 |
They shut the compound down, and this is what happens. 03:13:22.740 |
and what happens is, the inmate walks into a room, 03:13:31.620 |
Second question is, if you had seen anything, 03:13:45.820 |
So there was one incident, I remember this Hispanic guy, 03:14:05.080 |
the network of trust in the cyber crime community. 03:14:19.000 |
Trust drives everything at the end of the day. 03:14:30.700 |
you've got the rubber bullets, the tear gas canisters, 03:14:50.860 |
- So you get to detect what is the motivation for the riot, 03:14:54.500 |
what is the reason, and that gives you some calm. 03:14:57.460 |
So the second riot, you start to notice this. 03:14:58.740 |
Hey, man, this ain't me, this ain't our group. 03:15:02.700 |
Third riot, no shit, third riot, you lay in your bunk. 03:15:12.100 |
that'll run up to you and he'll point to a locker, 03:15:14.820 |
And if you tell him yes, they leave it alone. 03:15:18.020 |
they'll break into it and steal everything out of it 03:15:37.900 |
And the way I got to that, this counselor at Big Spring, 03:15:49.700 |
He got a discount on a game theory class set. 03:15:56.780 |
and he's asking, "Does anybody on the compound 03:16:09.980 |
He was like, "Do you know anything about game theory?" 03:16:32.900 |
and the transfers are taking like four or five months. 03:16:36.460 |
That's four or five months I could be out free. 03:16:47.100 |
And he looks at me, he's like, "Brett, I cannot help you." 03:17:04.260 |
24 hours a day of cognitive behavioral therapy. 03:17:07.820 |
It was all peer study stuff and CBT training. 03:17:12.060 |
And honestly, it's the best thing that could ever happen. 03:17:41.420 |
I mean, I loved Elizabeth, I love my wife now, 03:17:58.940 |
she ends up driving seven hours to come see me 03:18:02.500 |
And I don't see her again for five and a half years. 03:18:20.900 |
tell me she loves me, and then I don't see her. 03:18:26.580 |
- But yeah, you had time to think over those years. 03:18:31.300 |
that I didn't commit crime because of stripper girlfriends 03:18:50.140 |
I went through it and they ingrained it in you, 03:18:52.140 |
but until you choose to make it work, it doesn't work. 03:18:56.740 |
So I got out in 2011, didn't wanna break the law, did not. 03:19:11.820 |
No, you're not moving and that's a computer, idiot. 03:19:20.660 |
I got to where I was trying to apply for fast food jobs. 03:19:28.780 |
Well, that's a computer and access to credit cards, idiot. 03:19:42.540 |
They tell you when you leave prison to get a job 03:19:45.260 |
and something you care about and you won't recidivate. 03:19:56.900 |
Yeah, I had enough money to feed that little guy 03:19:59.620 |
and didn't have money to buy toilet paper for the apartment. 03:20:11.420 |
So he bankrolled a lot of that until he couldn't. 03:20:14.300 |
And then from there, it's like, what the fuck do you do? 03:20:18.180 |
So I didn't wanna go into computer crime at all 03:20:20.780 |
and I ended up shoplifting toilet paper, man. 03:20:26.540 |
Just like for the basics, the basics of survival. 03:20:30.620 |
So about the same time, I had a friend that, this guy. 03:20:35.220 |
I'd been dating the same type of women I had been dating. 03:20:37.740 |
You know, the unhealthy ones, the hot unhealthy ones. 03:20:44.980 |
So I had a friend post an ad for me on Plenty of Fish 03:20:48.980 |
and this woman responds, my wife, she responds. 03:20:53.100 |
And the pictures I had taken were these prison type pictures, 03:20:58.980 |
She sends me a message of, "Why aren't you smiling?" 03:21:01.460 |
And my response was, "That is my happy face." 03:21:14.980 |
I was going broke, I was about to get kicked out 03:21:17.620 |
And she didn't say it, but I think she knew it. 03:21:38.100 |
Called him up and he was like, "Come on down and talk to me." 03:21:43.780 |
So I'm sitting there talking to him for about 20 minutes. 03:21:46.180 |
He looks at me, he's like, "Can I ask you a question?" 03:21:49.340 |
He's like, "Are you on the run or something?" 03:21:57.980 |
So I told him, I was like, "This is who I am, 03:22:05.780 |
So he tells me to go on home, that was a Friday. 03:22:09.780 |
Sunday evening he gives me a call and he was like, 03:22:12.060 |
"Brett, if I hire you, will you actually work?" 03:22:17.060 |
And I told him, I was like, "Dustin, if you'll give me a job, 03:22:25.140 |
So my job was to push a lawnmower 10 hours a day, 03:22:29.020 |
five days a week for $400 a week, and busted my ass. 03:22:53.340 |
by that point I'd learned everything on the business 03:22:56.860 |
"You know, if you'd like to come in, I'll cut you in half." 03:22:59.740 |
And I was like, "Dustin, I can't do it, man." 03:23:07.460 |
And I thought I found another job doing something else. 03:23:21.780 |
doing the sales for oil rig training, was what it was. 03:23:26.620 |
And I accepted the job, I quit working for Dustin. 03:23:31.900 |
And the guy, I told him before he even offered me a job, 03:23:42.340 |
well, he calls me and tells me he can't hire me. 03:23:46.780 |
And Dustin's already hired somebody else by that point, 03:23:58.820 |
It's important for me to show value in a relationship. 03:24:15.100 |
if nothing else, I can just bring food in the house. 03:24:20.020 |
I mean, we were at it hard, it was just her working. 03:24:27.820 |
And get on the dark web, get some stolen credit cards, 03:24:51.740 |
So she had been to work and she was coming back from work, 03:25:00.300 |
come to the police station, I've been arrested. 03:25:02.300 |
And she shows up and she didn't know I'd been doing that. 03:25:46.060 |
Probation officer stands back up and he was like, 03:25:50.120 |
Mr. Johnson, judge, if you can give Mr. Johnson 03:25:59.500 |
So the judge amends the sentence to a year and a day. 03:26:13.820 |
I do my 10 months, get out, we get married after that. 03:26:22.940 |
They were like, inmates, a felon, if nothing else, 03:26:40.700 |
And to this day, Lex, I know what my triggers are. 03:26:53.100 |
Signed on to LinkedIn, reached out to this FBI super cop 03:26:56.940 |
named Keith Malarski out of the Pittsburgh office. 03:26:58.980 |
He was involved with my arrest and some associates 03:27:05.300 |
And the message was, hey, I respect everything you did. 03:27:19.420 |
takes me in under his wing, everything else like that. 03:27:24.260 |
of the Identity Theft Council did the same thing. 03:27:34.460 |
And the Microsoft hire established enough trust 03:27:37.580 |
in the industry that I was all right from that point. 03:27:48.740 |
So big picture advice, given that you were that guy, 03:27:58.140 |
and in the next five years, 10 years, 20 years, 50 years? 03:28:03.460 |
to companies, to governments, and also to Elizabeth? 03:28:13.460 |
Like the humans, human beings that are in the world 03:28:18.460 |
that love, that live, that are friends with cyber criminals? 03:28:23.460 |
- There's so many lessons to really be had from that. 03:28:29.000 |
To me, the lesson, one of the big lessons to me 03:28:43.380 |
or you're in love with somebody that's addicted or has that, 03:29:09.900 |
that the only reason I was able to turn my life around 03:29:17.820 |
- They believe that there's a good person in there. 03:29:24.880 |
these companies that initially gave me that chance, 03:29:30.020 |
I have no doubt about that at all, all right? 03:29:34.800 |
Cyber crime, a lot of companies that I talk to, 03:29:45.840 |
of how criminals establish trust with each other, 03:29:49.420 |
A lot of companies think that it's a single player 03:29:53.500 |
And when you really break down how cyber crime operates, 03:30:01.040 |
but they share and exchange information freely. 03:30:06.340 |
you've got competitive edge concerns, everything else. 03:30:08.360 |
Companies don't share information across the board 03:30:31.940 |
- So a lot of basic stuff that's already vulnerabilities, 03:30:47.420 |
- But in the full spectrum of, especially in the future, 03:31:01.460 |
and those vulnerabilities in terms of human nature, 03:31:03.740 |
so for social engineering and the actual outdated systems, 03:31:19.580 |
I made that point that they never report to law enforcement. 03:31:25.140 |
You know, I've worked with Fortune 50 companies 03:31:30.940 |
Instead, they'll have that insider or that criminal 03:31:39.420 |
You have to press charges, you have to report, 03:31:42.220 |
you have to raise the awareness of everyone in the group. 03:31:49.020 |
of understanding your place in that cybercrime spectrum. 03:32:02.220 |
You know, we've got 7,500 security companies out there. 03:32:19.860 |
to protect against the attacks that are out there. 03:32:25.500 |
- So I guess defending defense is not just like one tool. 03:32:40.860 |
probably attack vectors in terms of the software 03:32:50.140 |
But you can do the best job you can possibly do. 03:32:52.260 |
But it takes a variety of tools to do that, all right? 03:33:06.020 |
that they basically try to pick another target, all right? 03:33:09.780 |
You want it to be not worth the criminal's time 03:33:20.580 |
sort of testing systems and then giving companies 03:33:35.760 |
It has to be tempered with what is reality as well though. 03:33:40.760 |
All right, you know, we've got a whole industry 03:33:45.680 |
that I don't know of many RFID hackers out there 03:33:53.680 |
that's not actually providing any protection. 03:33:58.240 |
By the way, you wrote on LinkedIn something about ID me. 03:34:08.760 |
- I was wondering if you were gonna mention that. 03:34:10.800 |
You know, they lost, I guess I was partially responsible 03:34:25.840 |
ID me is a marketing company that wants to say 03:34:30.440 |
- I just wanna bring this up to see you get angry. 03:34:37.920 |
- So it's a company that's used for authentication 03:34:43.360 |
- Well, IRS, Social Security Administration, VA, 03:34:51.840 |
- So I guess the idea is that you would be able 03:34:54.680 |
to unlock your account or authenticate yourself 03:35:00.220 |
as a human being by using your face or something like that, 03:35:06.700 |
- They've got a tiered system for the verification. 03:35:08.860 |
They've got a free system, which is questionable, 03:35:17.740 |
And I don't wanna talk about their security horribly bad 03:35:20.060 |
because I wanna be honest, there are bypasses 03:35:22.860 |
for a lot of security systems out there, all right? 03:35:26.380 |
The issue that I have with ID.me is that their policies 03:35:37.500 |
but if you're a government agency and you as a citizen 03:35:53.460 |
And then that private company uses that profile 03:35:55.460 |
for marketing purposes to further profit, things like that. 03:36:01.740 |
I don't care if you're a private company that does that, 03:36:03.840 |
I just don't think that citizens need to be forced 03:36:05.800 |
into doing that in order to get a benefit or service 03:36:14.820 |
how much we talked about the value of identity, 03:36:17.460 |
you don't think that should be handed over lightly? 03:36:21.580 |
And who would have thought that Brett Johnson 03:36:37.940 |
And certainly you've got a host of companies, 03:36:42.380 |
but you've got some of these companies that say, 03:36:44.100 |
well, we strip out the PII of the individual. 03:36:49.420 |
and the sites they're visiting and things like that. 03:36:53.180 |
You can still ping that one unique individual 03:36:55.660 |
out of all, using that information, stripping out the PII, 03:37:00.940 |
- So having lived a life of crime for many years, 03:37:14.220 |
But the network indirectly is even larger, right? 03:37:18.580 |
- Are you, and I apologize for this question, 03:37:22.860 |
are you ever worried for your life, for your wellbeing? 03:37:27.020 |
Like having seen a world that's really dangerous 03:37:30.340 |
in ways that's not, that operates in the shadows? 03:37:35.100 |
- You know, like I said, when we started Shadow Crew 03:37:41.140 |
and started that initial cyber crime business, that world, 03:37:54.460 |
- Yeah, the mob, the mafia are now part of this whole thing. 03:38:03.780 |
in cyber crime marketplaces because of the profit potential. 03:38:06.460 |
And with that comes a lot of violence as well. 03:38:08.820 |
- Yeah, the cartels already brought the violence 03:38:20.140 |
It's interesting that my family worries about that. 03:38:24.260 |
All right, I think I may be just too involved in it 03:38:41.200 |
I've made, I've built my trust in this industry 03:38:49.860 |
and individuals and not being scared of targeting criminals 03:39:03.340 |
It's a gift and thank you, thank you for doing that. 03:39:06.780 |
Is there a device you can give to young people today 03:39:21.620 |
So if you look at somebody young today in high school 03:39:23.820 |
and college thinking how they can break the rules legally 03:39:33.020 |
they could be really proud of, what would you say? 03:39:35.860 |
- Biggest lesson I've learned, you want your life 03:39:40.860 |
to be one where you're helping people and not hurting people. 03:39:49.900 |
You see the brightest minds in the United States 03:40:03.980 |
and harming individuals, that's a hell of a lesson. 03:40:07.860 |
And I'm glad I'm there, but I would tell people out there, 03:40:11.100 |
it's fine to want money, it's fine to do that, 03:40:14.540 |
it's fine to test systems, it's fine to circumvent the rules 03:40:18.240 |
if you're not breaking the law, it's fine to do all that. 03:40:23.580 |
if you can just adhere to the mindset of helping people 03:40:26.540 |
and not hurting people, I think you'll be all right 03:40:45.500 |
If we do all right, if we make it out of this century, 03:40:55.560 |
- What would be, that's a damn good question. 03:40:59.160 |
'Cause I mean, we got a lot of bad stuff going on. 03:41:05.700 |
of how do you think human civilization will destroy itself, 03:41:22.200 |
- That's been the heartbreaking thing about COVID 03:41:41.620 |
It's not the destructive nature of what it does to your body. 03:41:49.240 |
that human connection is to human civilization. 03:42:04.560 |
- When there's injustice, we see it, we rise up. 03:42:09.560 |
- I wake up every morning and I watch Fox News 03:42:19.780 |
The division, the outrage, they're really feeding, 03:42:34.000 |
because before I met her, I was a news hound. 03:42:37.440 |
News would be on all the time, a couple of channels of it. 03:42:40.120 |
And she was the woman who didn't watch the news. 03:42:49.520 |
You know, now I'm like, pretty smart, you know? 03:42:53.600 |
Don't need to listen to that bullshit as it is. 03:42:58.160 |
I just, I feel like that's the right perspective 03:43:05.600 |
You know, how will this time be written about 03:43:10.440 |
Don't the daily ups and downs of the outrages, 03:43:25.680 |
Because, you know, I'm talking about that relationship 03:43:33.000 |
So I really appreciate you asking those questions 03:43:34.960 |
and everything, me being able to talk about that. 03:43:52.880 |
That is what makes us human, is that connection 03:44:06.520 |
I, to me, that meaning of life is finding out 03:44:09.760 |
that lesson, that we need to help each other. 03:44:16.000 |
But, you know, everybody's worried about themselves. 03:44:21.840 |
is it takes everybody looking out for everyone else. 03:44:29.480 |
- And however you take, whatever journey you take 03:44:34.840 |
I mean, with me, I've been asked a few times, 03:44:37.720 |
do you regret anything, would you change anything? 03:44:40.040 |
I've done a shitload of despicable things in my life. 03:44:45.040 |
But I'm at a point in my life where I like who I am. 03:44:50.280 |
And I know that I am doing exactly what I'm supposed 03:44:55.640 |
As bad as a lot of that shit has been, I wouldn't. 03:45:19.760 |
I'm on a lot of podcasts and everything like that. 03:45:26.720 |
And that ended because of a difference of opinion. 03:45:31.040 |
Depending on who you ask, one of us was an asshole. 03:45:38.560 |
which that was, I gotta be honest with you, Lex, 03:45:58.400 |
But it's gonna be talking about cybercrime security, 03:46:10.280 |
talk to criminals and how they turn their lives 03:46:13.400 |
But there's some shit I wanna bitch about too. 03:46:33.280 |
One of the best public speakers I've ever heard. 03:46:45.400 |
Anyway, I'm deeply honored that you spent your time 03:46:53.960 |
To support this podcast, please check out our sponsors 03:46:59.600 |
from George R.R. Martin, from "A Clash of Kings". 03:47:12.380 |
Thank you for listening and hope to see you next time.