Former Blackhat Hacker Jesse McGraw Describes His Shift to OSINT Child-Safety Work
Summary
Jesse McGraw, formerly known as GhostExodus, discusses his criminal hacking, including unauthorized access to computers at a Dallas medical facility, and his later shift to legal OSINT work supporting online child safety.
Key points
- McGraw says that as a teenager he used social engineering to access remote systems and later hacked more than 14 computers at the North Central Medical Plaza, including an HVAC/SCADA computer.
- He says the access was intended to support a botnet response by his group, the Electronik Tribulation Army, against Anonymous; he was arrested days before the planned July 4, 2009 action.
- Researcher Wesley McGrew recognized medical equipment in a video McGraw posted and contacted the FBI; McGraw says the FBI completed the identification.
- McGraw was sentenced in 2011 to 110 months, which the article describes as amounting to 11 years with pretrial detention.
- McGraw says he now uses publicly available information and OSINT for online child-safety work, identifying suspected predators and reporting them to authorities.
- He advocates legal and responsible computer use, emphasizing victim impact and the potential harm of attacks on healthcare and industrial control systems.
Article Details
- Topic
- Jesse McGraw’s past blackhat hacking, conviction, and subsequent work as a cybersecurity researcher and advocate
People
Jesse McGrawFormer blackhat hacker who now describes himself as a cybersecurity researcher and advocate; he says he uses OSINT for online child-safety work and to help prevent victimization.Wesley McGrewResearcher who recognized medical-facility equipment in McGraw’s video, used OSINT to help de-anonymize him, and contacted the FBI.
Threat Actors
AnonymousThe article reports that Anonymous, or parts of the group, attacked the Electronik Tribulation Army and doxxed one of its members.Electronik Tribulation ArmyHacker group led by Jesse McGraw; the article says it planned a response to Anonymous and referred to July 4 as “Devil’s Night.” The article also calls the group ETA.Jesse McGrawMcGraw was convicted for hacking more than 14 computers at a Dallas medical facility, including its HVAC/SCADA computer. The article says he was known online as GhostExodus.
Industries
Cybersecurity“I’ve found my place in the world after my time spent in prison and am now a cybersecurity researcher and advocate.Educationbe doing – to help keep people from attacking industrial control systems, the healthcare sector, education, and things like that.”Healthcareand what they shouldn’t be doing – to help keep people from attacking industrial control systems, the healthcare sector, education, and things like that.”