Darknet Diaries Revisits the MOD–LOD Hacker Feud and Federal Crackdown
· 1:06:36 · Watch on YouTube ↗
Summary
Darknet Diaries traces Masters of Deception's telecom intrusions, its feud with Legion of Doom, and the federal investigations that followed, alongside early EFF challenges to computer-crime prosecutions.
Key points
- The episode describes Masters of Deception members stealing credentials through fake login prompts and accessing telephone switches and corporate systems.
- According to the account, privileged access to a centralized communications network let members monitor administrator password changes and read security department emails.
- The MOD–LOD feud escalated into telephone harassment, disclosure of personal information, and unauthorized interception of calls.
- Telephone-company investigators used call metadata to identify connections among hackers; authorities later obtained authorization to capture computer communications.
- The episode reports prison sentences for several MOD members and examines EFF support for defendants and concerns about CFAA enforcement.
- Craig Najdorf's E911 publication case was dropped after evidence undermined claims that the information was secret and highly valuable, according to the episode.
- The episode distinguishes the AT&T outage from the hackers' intrusions, reporting that AT&T attributed the disruption to a bug in its own software.
Article Details
- Topics
- [00:38] Telephone-company investigators trace unauthorized network access
- [09:58] Online privacy debate and disclosure of a participant's credit history
- [15:27] Formation of Masters of Deception and telephone-switch intrusions
- [20:28] Credential interception through impersonated login prompts
- [26:47] Reported privileged backdoor access to a centralized communications network
- [39:20] MOD–LOD feud escalates into harassment and call interception
- [45:58] Federal data taps and prosecution of MOD members
- [48:06] EFF legal support, CFAA enforcement, and the E911 publication case
MITRE ATT&CK
T1078 · Valid AccountsThe episode describes unauthorized use of an employee login token for the telephone company's remote-access hub and subsequent use of stolen account credentials.T1114 · Email CollectionThe account describes MOD members reading the communications network security department's emails to anticipate defensive changes.T1557 · Adversary-in-the-MiddleEli describes interrupting a network session and impersonating its destination with login and password prompts to capture credentials.
People
Craig NajdorfIdentified as Night Lightning and co-founder of Frack; prosecuted for publishing the E911 file, with the case subsequently dropped according to the episode.Fred StaplesTelephone-network engineer who worked with Tom Kaiser to investigate unauthorized access and trace connections among hackers.John Perry BarloThe episode describes him as a victim of credit-history disclosure who subsequently helped establish EFF and supported digital-rights legal advocacy.Lloyd BlankenshipGame developer and author of the hacker manifesto whose cyberpunk game work was described as a focus of the Secret Service raid on Steve Jackson Games.Mitch KaporDescribed as helping establish EFF to support digital rights and legal cases involving constitutional rights in cyberspace.Steve JacksonChallenged the characterization of his company's fictional cyberpunk game material as a hacker instruction manual following a Secret Service raid.Tom KaiserNew York Telephone Company security investigator who used call records and dialed number recorders to trace hackers' activity.
Threat Actors
Acid FreakIdentified as Eli and a MOD co-founder; describes credential interception using impersonated login prompts. The episode reports a six-month jail sentence and involvement in a credit-report conspiracy case.CorruptIdentified as John Lee; the episode attributes unauthorized telephone-switch access, call interception, and personal-data disclosure to him and reports a one-year jail sentence.Fiber OpticIdentified as Mark; the episode attributes unauthorized telecom access and public disclosure of John Perry Barlo's credit history to him, and reports a one-year prison sentence.Legion of DoomAlso called LOD; the episode describes members' unauthorized access, the theft of the E911 file by the prophet, and a feud with Masters of Deception. It does not establish responsibility for the AT&T outage.LODExplicitly identified as Legion of Doom; the episode discusses members' hacking activity and prosecutions, while attributing the AT&T outage to a software bug rather than the group.Masters of DeceptionAlso called MOD in the transcript; members are described as conducting unauthorized telecom and corporate-system access, credential interception, and personal-data disclosure. Several members received prison sentences according to the episode.MODExplicitly identified as Masters of Deception; the episode attributes telecom intrusions, credential interception, and harassment to members.OutlawIdentified as Julio; described as participating in MOD intrusions with John Lee. The narrator suggests, without establishing, that cooperation with police explained his avoiding punishment.ParamasterIdentified as Jason Snitker; the episode reports his account of unauthorized banking access, generating and distributing debit-card numbers, and sharing privileged network access with other hackers. Details of the backdoor remain uncertain in the narration.ScorpionIdentified as Paul and a MOD co-founder; described as accessing a telephone switch and enabling unauthorized calling features. The episode reports a six-month jail sentence.