Darknet Diaries Ep: 70/ Ex black hat. Threat hunter. Writer 4 RansomNews. #OpChildSafety Telegram: t.me/ETACore
Articles by Jesse McGraw
Discover how SDR lets you explore global signals like a pro
I love radio, particularly when it bleeds into signals intelligence. Since the onset of the sweeping power grid blackouts across the Iberian Peninsula and into Western Europe, I’ve been surfing the airwaves and learning new things about the fascinating world of radio frequencies. That’s why I bought an RTL-SDR, or Realtek Software Defined Radio. I am a survivor of the 1994 Northridge Earthquake, which rocked Los Angeles and caused around two million people to lose power.
“You’ll be shocked how a teen hacker turned the internet into a weapon of revenge
I remember the days when I was a teenager, sitting at my computer and eager to explore the information superhighway in the 90s with my dial-up modem. Looking back, when I hacked into systems and poked around for fun to satisfy my curiosity, I had no other motive. But the world changed, and so did my motives.
GhostSec’s ground war on Israeli satellites
Following the recent escalation between Israel and Iran, the pro-Palestinian hacktivist group GhostSec has reportedly shifted its focus toward space-based assets. It is particularly interested in Israeli satellites. This is how they protest. GhostSec has long distinguished itself from the hacktivist landscape by carrying out far more sophisticated tactics and targeted operations than its peers.
Hacker’s guide to asymmetrical OSINT warfare
I’ve never experienced a warzone or had to survive an invading army, but I know something about powerlessness. I grew up in rough neighborhoods near the border of Tijuana, Mexico. Most of my family has been carjacked or abducted. I was kidnapped once, albeit briefly. Powerlessness was familiar, but it never taught me hopelessness. Someone once said, “To be powerless is to be at the mercy of the powerful, and that is the root of all oppression.” That hit home.
When hunters become hunted: Trauma, abuse, and the cost of anonymity
Recently, a member of Anonymous confessed to me that police had seized his phone as key evidence in an investigation into his abuser. He had been a victim himself and had recorded a confession from his abuser on the device. That recording was later classified as evidence, along with the phone. This turn of events didn’t take me by surprise.
Your digital footprint Is bigger than you think – sanitize it now
In June 2009, during my black-hat days, I had someone in my hacking group whom I’d appointed to manage my digital footprint. The idea was that if I ever found myself in legal trouble, I could call on them to help sanitize all the incriminating evidence of my hacking activity. The only problem? When it really mattered, it was already too late. That is the most extreme example of what happens when your digital footprint falls into the wrong hands, unwittingly.
Hacker instincts unleashed: How I turned the Rabbit R1 into an OSINT power tool
I like to use technology in unconventional ways because the hacker in me still enjoys pushing boundaries until something breaks. Always on the hunt for the best affordable OSINT tools, I recently stumbled upon an unsuspecting superweapon: the Rabbit R1. I’ve covered the Rabbit R1 previously, but not like this.
Simple guide to digital evidence for civilians
When I'm not writing articles, I do a lot of freelance OSINT work. While the majority of that work involves de-anonymizing predators or tracking missing persons, this realm of OSINT contains a vital, inalienable component: handling digital evidence. Let me present a scenario. Imagine being part of a civilian-led OSINT group dedicated to hunting threat actors, even predators.
Exposed by the Defense Department: How hackers are recruited as assets
Greetings, user. If there’s one thing whispered in hacker circles in hushed, conspiratorial tones, it's who’s an informant and who isn’t. How do law enforcement and government agencies recruit hackers? What traits do they look for? I work for no government, no offense. The funny thing is, I’m not even an anarchist or anti-government; after all, I was raised in a proud American household.
Turning ChatGPT into a digital detective for hacktivist investigations
After playing the military-grade cyber operations simulator NITE Team 4 and using the game’s version of the leaked NSA’s mass surveillance tool XKeyscore, I realized that both XKeyscore and ChatGPT share a fundamental ability: pattern recognition analysis. Outside the simulator, XKEYSCORE is a real NSA dragnet surveillance system and analytical platform that was leaked by whistleblower Edward Snowden back in 2013. In other words, it's an analyst's dream and privacy advocate’s nightmare.
Why I stopped hacking things just because I could
Greetings, reader! I want to talk about my former life as a blackhat hacker because it never makes any sense. Many of my rampant hacking campaigns focused on breaking into big servers across several industries but not on seizing the networks by the throat and forcing them to their knees. I think someone once said, “Your story is a collection of ‘almost did big things.’” This is true for me because I always knew when to pull back.
The invisible watchers: How canary tokens alert you to intruders
Canary tokens are digital "tripwires" that function like honeypots, designed to send a notification when triggered by a threat actor. They can provide details such as the intruder’s IP address, browser fingerprint, timestamp, and geolocation. What’s particularly interesting is their versatile deployment – and better yet, there are free services available to implement them.
Hacktivists played themselves in ironic X takedown
Greetings, readers. I have a question I would like to provoke your thoughts with. Whenever we think of hacktivism, what comes to mind? You see, the spirit of hacktivism is enriched with a broad palette of ideological flavors. The answer is often as ambiguous as defining all the different hats that hackers wear.
Retro Review: Nissan Silvia
1989 Nissan Silvia K - nissan-global.com Nissan S-Chassis: A Drifter’s Dream Nissan had some big hitters in the ‘90s that have become staple cars among JDM enthusiasts. You of course had the Nissan Skyline GT-R and Nissan 300ZX at the top of the list, but we can’t forget about the awesome drift missile known as the Nissan Silvia. It was a sleek sports car sold for a great price. This left owners with a bit of extra cash to modify the car to their heart’s content.
Escape the certification trap with these OSINT career opportunities
I am constantly approached by people looking for work in Open-Source Intelligence (OSINT). Many are hackers wanting to turn over a new leaf and do something legitimate without jumping through regulatory hoops just to prove they have the knowledge, skills, and experience for the job they’re applying for. If that sounds like you, then you’re in the right place. Cybersecurity and IT roles within the industry are largely regulated through training and certification courses.
TikTok profiting from child exploitation livestreams?| Cybernews
According to sources, the BBC was informed that TikTok is profiting from teenagers as young as 15 performing sexual livestreams, despite its policy that prohibits these activities. If companies like TikTok rely on AI-driven algorithms to police unlawful, dangerous, or sexually explicit uploads, why is this happening? Regardless of the algorithms, did you know that, per policy, TikTok bans sexual solicitation as well as traditional solicitation – such as begging for money – known as digital gifts?
ChatGPT vs DeepSeek: privacy laws and their relationship with intelligence agencies
I don’t use DeepSeek for reasons you will learn below. However, did you know that there’s little public discussion about the relationship between OpenAI's cloud services and its proximity to a member of the Five Eyes? We all use a variety of online services that snoop and scoop our data. But while our attention is often focused on the information we consume from these services, it's possible we aren’t well informed about where our data goes and how it is being used.
Parents unmask TikTok's hidden predators
Earlier this month, there was an incident involving one of my kids and a man posing as a teenage girl named Karla on TikTok. We monitor our children’s phone and internet activity like the NSA. However, this man had taught our daughter how to circumvent our inspections by hiding a messaging app called JusTalk in a hidden apps folder. The folder was protected with a 6-digit PIN, which she knew since it was the same PIN as the phone’s lock code itself.
Legendary groups that shaped hacker culture
Let’s dial up and reconnect to a time of bustling underground hacker scenes. After all, the culture that came before us is responsible for introducing and nurturing the world of hackerdom, which shaped the modern hacker’s identity. Although before the birth of the computer hacker, phone phreakers (telephone hackers) existed. Now, let’s remember the beauty of the baud – that glorious symphony of chirps and bouncy tones that once bridged us to this digital frontier.
Enter hacking simulations: games that provide foundation and culture
The best hacking games to improve your cybersecurity skills and hacking knowledge. But remember, hack responsibly. Over a decade ago, I was obsessed with hacker games for the PC. Don’t laugh. It’s hard to explain, especially since I was an actual computer hacker and didn’t depend on simulations to feel like I was one step away from having my door kicked in by the Feds.
Hacker withdraws from Anonymous: it was overwhelming
One of the primary reasons I had to withdraw from Anonymous was the overwhelming number of Child Sexual Abuse (CSAM) links and screenshots shared by independent 'pedo-hunting' groups in their chats, where their investigations are organized. Many groups and individuals involved in online pedo-hunting fail to understand one critical element: calling yourself a 'pedo-hunter' does not make you immune from legal repercussions.
Orwellianism is on the rise as the UK criminalizes free speech, hacker claims
British citizens are being arrested for exercising free speech in the United Kingdom. This has been going on for over a decade but is escalating to new heights under the direction of UK’s Prime Minister Keir Starmer. Furthermore, US citizens visiting the country could face criminal prosecution.
Interview with Internet Death Machine: hacktivism, privacy, philosophy
There was a time sixteen years ago when I was first introduced to an artist known as Internet Death Machine (IDM). This dopamine-packed industrial nerdcore hacker music fuelled caffeine-driven late nights, providing the energy I needed to commit countless hours of intrusions and subsequent inspiration.
Top tips and tricks to upgrade your OSINT skills
My inbox is full of requests to teach Open Source Intelligence (OSINT) techniques, especially from new recruits to W1nterSt0rm, an #OpChildSafety initiative. Having OSINT skills in a data-driven environment is vital and can help you navigate a world that tries to hide and obfuscate the truth. OSINT fundamentally involves using good investigative skills to analyze publicly available information. It’s that simple.
Courageous hackers march outside the very courthouse that sent them to prison
In 2023, two hackers joined forces after over a decade of federal imprisonment on hacking charges. They met in their 20s while in jail, awaiting the outcome of their respective criminal cases. But now they were much older. They hatched an unthinkable plan: to march outside the very courthouse that had sent them to prison. Those hackers were Crazy_C and GhostExodus – yours truly. While we did not establish the Million Mask March movement by any means, together, we founded the Dallas branch.
Malicious code: an interview with Anonymous
In the case of the hacker known as SPYDIRBYTE, one could say that malware maketh the man. As controversial as that may sound, consider how malware can be leveraged against the enemies of a hacktivist, such as corrupt state and commercial actors. When we think of malware, we often envision simple, whimsical DDoS attacks taking random websites offline. I've spent more time criticizing the Anonymous collective for such attacks than for anything else.
Recovering deleted files: digital forensics for the everyday person
I believe the everyday person should know how to recover deleted files or messages. That way, you don’t have to hire someone or say goodbye to important or sentimental data. I stumbled upon digital forensics seemingly by accident many years ago. In the early 2000s, I used to do what is called 'trashing,' a term used by the hacker subculture synonymous with 'dumpster diving.' That’s how I got all my computer gear before I could afford my own. One person’s trash became another person’s treasure.
The rise of a hacktivist: an exclusive interview with Dexer
In Los Angeles, California, in 2006, a 13-year-old high school boy’s eyes were opened as he curiously watched another student phishing MySpace accounts. This seemingly insignificant event would become the catalyst of a life journey. A door to another world appeared, and he found himself tumbling down the rabbit hole. Computers have always been the life force that gives existence to the children of the machine generation, serving as that innate first cause, like the Big Bang in the cosmos.
Confessions of a company infiltrator: "I was the last person you’d ever suspect"
Years ago, I sought employment at Lockheed Martin, one of the largest defense contractors in the world. With my resume in hand, reflecting my IT qualifications and charming demeanor, I hoped to land the job – so I could get physical access to its networks. At the same time, I had already applied for a janitorial position at a local police department to steal credentials for logging into the National Criminal Information Center (NCIC).
How I hack with an Apple Mac: a guide to empowering every byte
When most people think of hacking, they think of Linux. I used to turn my nose up at even the idea of hacking from a Mac because it didn’t make sense. Nowadays, it’s all I’ve been using for my OSINT investigations and penetration testing – as it has become my proverbial command center. When I sit down at my cluster of computer monitors and machines, I’m hidden behind at least four monitors and three computers. My MacBook Pro sits on a raised mount to my left.
To catch a predator admin: the power of OSINT
This #OpChildSafety investigation began on March 12th, 2024, when one of my threat researchers from W1nterStorm, whom I shall refer to by the alias CR-2 (Confidential Researcher), discovered a Facebook group called 'Modeling 4 Kidz' that was not what it appeared to be. This was the same Facebook group where CR-2 initially uncovered the CSAM (Child Sexual Abuse Material) network we named Hydra. This was a group designed to attract men and women with the same vile mindset.
Combating phishing attacks through awareness and simulation
In 2008, I started operating as a hacker for hire. Since the hottest thing on the market is always catching a cheater, I was hired to investigate whether my client’s fiancé was faithful or if he was having secret conversations on a German social networking site. There are a dozen different ways I could have uncovered the truth, the easiest being social engineering him from a fake profile. But that wouldn’t prove anything that might have happened before. My weapon of choice? Phishing.
Linux for kids: teaching the next generation
Education for kids isn't what it used to be, especially regarding the technology we use. We live in a world where exhausted parents have replaced baby pacifiers with smartphones and tablets to keep kids distracted, which doesn’t provide any meaningful mental stimulation beyond hand-eye coordination. I believe it's time to explore another way that could potentially prepare them for something better.
How the Rabbit R1 helps with my ADD and boosts productivity
I have Attention Deficit (ADD) and the attention span of a gnat, which is why I purchased the Rabbit R1. Its minimalistic user interface appealed to me, so I wanted to experiment with it to determine if it could help me with productivity. I won a bid for it on eBay for a hundred dollars less, so I was already on a winning streak. The pocket companion AI device had me at no subscription required. Plus, I love Push-To-Talk (PTT) walkie-talkie devices and exploring AI.
Dodge Challenger Generations
Jesse McGraw brings his life-long car obsession into his writing. A fun childhood that involved growing up around race tracks, working on a rusty ‘99 Dodge Dakota held together by zip ties, and collecting Hot Wheels developed into a strong appreciation for automotive history. If there is an old, obscure, or rare car, he wants to know about it.
Interviewing the ghost that took down 20% of the dark web
Seven years ago, on the last Friday of January 2017, an unusually large-scale cyberattack was carried out by an unknown cyber vigilante of unknown origin. More than 10,000 dark web sites hosted by Freedom Hosting II (FHII) were taken offline. Thus, the entire hosting service was unceremoniously unplugged, and its services were never restored. It was an effective annihilation.
The Cars of the Cars Movie
Cars from Cars on the Road Randy Randy - Disney Junior on YouTube In the Cars on the Road episode Lights Out, we’re introduced to the creepy owner and receptionist of the Destiny Hotel. Randy is a red 1967 Cadillac Superior Hearse and turns out to be a ghost himself. Ghosts Ghosts - Disney Junior on YouTube There are plenty of ghosts in Lights Out that haunt Lightning McQueen, but only a couple have been given names by Pixar. The first is a 1935 Ford Model 48 Deluxe called Mallory Karhut.
Is GhostSec finished with cybercrime?
I remember the day I tried to hang up my black hat for good. I was in a state of dichotomous thinking, you see. It’s challenging to be a black hat cybercriminal while also working as a hacktivist on the frontline of a moral fight against corruption and injustice. Sebastian Dante Alexander, the leader of GhostSec, has done just that, marking his withdrawal from The Five Families.
Hunting Hydra: the discovery of a massive CSAM network
It's been two weeks since my research team began investigating a website that was hosting a Child Sexual Abuse Material (CSAM) marketplace. But what we didn’t know was that it was only the tip of the iceberg. As one head of the Hydra appeared, another popped up, and the more we dug, the more heads appeared, reaching from the dark web, revealing a vast network spanning across the world.
W1nterSt0rm: OSINT on steroids
I’m a former cybercriminal. However, while operating under the black flag of cybercrime, I strove to give back to the community through good deeds so it could satisfy the inherent burden of guilt I carried due to my hacking addiction. I did this by using Open Source Intelligence (OSINT) to expose and neutralize online trolls, sexual predators, stalkers, and all other manner of nasty human beings. Nowadays, I am an ethical hacker and director of an #OpChildSafety initiative called W1nterSt0rm.
Bug bounties and the case for secure disclosure
I get it. Every security researcher involved in responsible, secure disclosure while participating in bug bounties should receive recognition for their achievements. After all, the industry can be highly competitive, and many of us struggle with underqualification. Who wouldn't want to be applauded for their hard work? Finding vulnerabilities and reporting them responsibly is good, honest work. However, this leads to the question, is the industry inadvertently directing the next cyberattack?
The quest for the righteous hack: revisited
I was sitting in solitary confinement in a federal prison back in 2012 when I received a coded message from a completely anonymous source. This was strange because I didn’t receive unsolicited mail often, but it was someone who studied a code scheme I often used in the past. The coded message described events that were being relayed to me by a third party from an eyewitness who detailed the alleged contents of an email account belonging to a United States government prosecutor.
Influential Women of Automotive History
Automotive Advancements Created by Women Some advancements to the automobile are credited to women. These improvements to the modern car can still be seen in use today. Like Bertha Benz and her additions to the first Motor Car, these women have made valuable contributions to the automotive world that we remember them for.
Cyberstalking and harassment: knowing your rights
Most of us in the hacker world have been stalked or are being stalked right now. For this reason, we try to plant eyes and ears everywhere to know everything about the unseen threats lying in the shadows, waiting to strike. But some of you aren’t hackers. You’re an everyday person. Some of you even know that you’re being hunted by a cyberstalker right now. If any of the above applies to you, this is definitely for you.
New social engineering threat: AI voice cloning
A new social engineering attack – artificial intelligence-based voice cloning – has emerged on social media. What does this mean? Put simply, imagine having your voice impersonated through AI by bad actors, painting a target on your back. Making “you” say things that you’d never say. If this sounds innocuous, think again. Social engineering is the foremost skill in the toolkit of hackers of all hats.
Anonymous: a cult of personality that could soon fail
The term “cult” often leaves a bad taste in the mouth. If someone says you’re in one, it usually triggers some kind of fight-or-flight response, as you either want to disprove the notion, attack the accuser, or just try to ignore the insinuation. But, be that as it may, take it from someone who was once in an actual cult: hacktivist collective Anonymous is a cult. A cult of personality. What does this mean?
Teen arrest sheds light on US swatting epidemic
Swatting is an act of criminal harassment in which a person issues a malicious false threat of violence in a call to emergency services, such as the police, with the goal of triggering a heavy-handed response against an unsuspecting third party. This can and has resulted in death – but will the arrest of a notorious serial swatter call time on this unpleasant phenomenon? Imagine this. You’re sitting at home, doing whatever it is you do.
Port scanning and legality
One day, I was sitting at home, minding my business and watching my firewall traffic. I was already in a heightened state of awareness because a foreign IP address had pinged my network. This isn’t necessarily abnormal, but I wanted to be mindful of any possibility that an intrusion might take place. I was expecting bad actors to come knocking. I scanned the foreign IP address using Nmap. No big deal, right? Is there a legitimate issue of consent? The simple answer is yes.
The powerful cyber weapons that can fit in your pocket
Nowadays, we have access to a large cache of cyber weapons that can fit neatly concealed in our pockets. They’re capable of hitting hard across the radio airwaves, making wireless-based attacks more seamless, autonomous, and effective. This article explores a few devices and misuse scenarios. Today is like any other day – business as usual, and nothing seems out of the ordinary. However, life has other plans, because suddenly the Wi-Fi goes down.
Virtual attack boxes meet hacktivism
Over a decade ago, whenever I wanted to test new malware or explore a new attack vector, I always executed them in the wild. I searched for vulnerable computer networks by exploiting weaknesses in remote desktop protocols and then executed. I didn’t consider the maliciousness of my research methods until it all caught up with me.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Jesse
Contact Jesse, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack