Darknet Diaries - 56: Jordan

Episode Date: January 7, 2020

This is the story of Jordan Harbinger. A bit of a misfit teenager, who was always on the edge of trouble. In this story we hear what happened that lead to a visit from the FBI.GuestThanks to ...Jordan Harbinger for sharing his story with us. You can find hist podcast by searching for The Jordan Harbinger Show wherever you listen to podcasts.SponsorsThis episode was sponsored by Thinkst Canary. Their canaries attract malicious actors in your network and then send you an alert if someone tries to access them. Great early warning system for knowing when someone is snooping around where they shouldn’t be. Check them out at https://canary.tools.Support for this episode comes from Blinkist. They offer thousands of condensed non-fiction books, so you can get through books in about 15 minutes. Check out Blinkist.com/DARKNET to start your 7 day free trial and get 25% off when you sign up.More information at https://darknetdiaries.com/episode/56.

Transcript
Discussion (0)
Starting point is 00:00:00 Hey, it's Jack, host of the show. We're about to hear a story from a friend of mine, Jordan. Jordan is one of those guys that has a million stories, like his life is just filled with crazy adventures. Like this one time he was traveling and got kidnapped, but then escaped. And then on another trip he was kidnapped again and escaped again. And he's also been in North Korea, I think, a few times. But today he's going to tell us a story about a time when he was a teenager and got a visit from the FBI.
Starting point is 00:00:32 These are true stories from the dark side of the Internet. I'm Jack Recider. This is Darknet Diaries. This episode is sponsored by Delete Me. I know a bit too much about how scam callers work. They'll use anything they can find about you online to try to get at your money. And our personal information is all over the place online. Phone numbers, addresses, family members, where you work, what kind of car you drive. It's endless. And it's not a fair fight.
Starting point is 00:01:19 But I realize I don't need to be fighting this alone anymore. Now I use the help of Delete Me. Delete Me is a subscription service that finds and removes personal information from hundreds of data brokers websites and continuously works to keep it off. Data brokers hate them because delete me make sure your personal profile is no longer theirs to sell. I tried it and they immediately got busy scouring the internet for my name and gave me reports on what they found. And then they got busy deleting things. It was great to have someone on my team when it comes to my privacy. Take control of your data and keep your private life private by signing up for Delete Me. Now at a special discount for Darknet Diaries
Starting point is 00:01:54 listeners. Today, get 20% off your Delete Me plan when you go to joindeleteme.com slash darknetdiaries and use promo code darknet at checkout. The only way to get 20% off is to go to joindeleteme.com slash darknetdiaries and enter code darknet at checkout. That's joindeleteme.com slash darknetdiaries and use code darknet. Support for this show comes from Black Hills Information Security. This is a company that does penetration testing, incident response, and active monitoring to help keep businesses secure. I know a few people who work over there, and I can vouch they do very good work.
Starting point is 00:02:35 If you want to improve the security of your organization, give them a call. I'm sure they can help. But the founder of the company, John Strand, is a teacher, and he's made it a mission to make Black Hills Information Security world-class in security training. You can learn things like penetration testing, securing the cloud, breaching the cloud, digital forensics, and so much more. But get this, the whole thing is pay what you can. Black Hills believes that great intro security classes do not need to be expensive, and they are trying to break down barriers to get more people into the security field.
Starting point is 00:03:06 And if you decide to pay over $195, you get six months access to the MetaCTF Cyber Range, which is great for practicing your skills and showing them off to potential employers. Head on over to BlackHillsInfosec.com to learn more about what services they offer and find links to their webcasts to get some world-class training. That's BlackHillsInfosec.com. BlackHillsInfosec.com. When Jordan was a kid, like many of us, he wasn't sure what he wanted to do with himself. He was smart, energetic, clever, bored, and sometimes a rascal. You mix all that up and
Starting point is 00:03:46 you get a kid that constantly got in trouble and was into a lot of mischief. It seemed like he didn't know right from wrong sometimes. It might just be a bad seed going down a bad path. There was a time when my mom was crying in the kitchen and it was one of the lowest points of my life. And she was crying in the kitchen because she thought that her son was going to screw his whole life up. And he had a lot of promise and she didn't understand why. And she thought maybe it was her fault and she had no idea. And there was a time when I thought I can't be an employee or I can't get this stuff straight or maybe I am going to not be able to resist my own BS urges and end up doing something stupid
Starting point is 00:04:31 and end up in prison committing fraud to buy something dumb that I didn't even need. We've all made mistakes when we were young. Our brain's just not fully formed yet. When you look at a young kid doing bad things, is there a way to tell if they're really bad or deep down good? Curious kids get in trouble. Kids who think the world is strange or inefficient get in trouble. It's only the kids who know how to play by society's rules that do good as kids. But maybe some of us don't know how to play by the rules properly
Starting point is 00:05:03 until we get in proper trouble. Or maybe it just takes the right person at the right time to make a serious impact on a young mind. Let's go back to the early 90s, when Jordan was 12 or 13, when he got his first computer. And of course I got a modem. And so what I ended up doing was going on a lot of bulletin board systems, networking my way on there, literally and figuratively. And I don't mean like networking in the computer sense. I mean, making friends with people online who lived in Detroit and
Starting point is 00:05:36 talking about crazy zany topics and having a lot of fun and chatting about adult things. At this point, I really get interested in making things that explode. Now, you can't do that without getting your door kicked in by the FBI. But back then, it was like, oh, Drano bombs, hilarious, right? And this kind of like bottle rocket or model rocket that you've attached an explosive payload to. So funny, you can make a big boom and the whole neighborhood freaks out and the windows rattle and everyone's, you know, kind of like, that kid. Nobody's like Al-Qaeda.
Starting point is 00:06:09 That's what they do now, right? They go, domestic terrorism. Back then it was just you redneck punk. So I start getting a reputation as the guy that has all of those recipes for everything. And I got every text file, they were.txt files, of every kind of like device, box, explosive, everything. And so what my move was, is I would sign up to a new board. And I would, you know, they had the sysop would have to approve
Starting point is 00:06:37 you, you sign up for the new board, and bulletin board system. And then at some point, I'd say, look, you should let me in. I have 10,000 or 1,000 or whatever it was, files about red boxes, blue boxes, explosives, all this stuff. And a lot of people had some of it, but not many people had, like, all of it that you could possibly find anywhere. I was an avid collector of this. At 13, and he's already developing like an encyclopedic knowledge of explosives,
Starting point is 00:07:10 stuff that he probably shouldn't be getting into at that age. But people on these bulletin boards thought he was cool. So the admins would ask him to upload what he had, and he did. And these sysops of these great pirate boards or little hacker boards that were just kind of like small time or medium time i guess you could say they were stoked and sometimes boards would go hey man you have so much of this i need you to curate it i'm going to make you an assistant sysadmin after a couple months can you organize this make it really cool i want to make this kind of an hq our board has the most of this stuff now anywhere that I've ever seen.
Starting point is 00:07:45 And these are boards that also had games and stuff like that. And they were pretty elite for my area back in Detroit. And I remember they were always busy and they had multiple phone lines. I mean, these were freaking legit, man. Jordan started meeting some of these people from online in real life. And he would get together and meet with them in Detroit. But these guys were into something that Jordan hadn't seen before. They liked jumping into trash cans and looking for
Starting point is 00:08:11 stuff. Dumpster diving. They were looking for something particular. No, they weren't trying to find free pizzas or day-old bread. They were looking for something a little more interesting. The guys were like, hey, you know what we're dumpster diving for? These electronic serial numbers. You want to see what we do with them? And I was like, sure. So I started learning how to program cell phones. And that was the beginning of the journey.
Starting point is 00:08:36 Jordan was up for this kind of stuff. Heck yeah. As a teenager hanging out in the town with the older kids who knew how to hack cell phones, who also accepted Jordan, Jordan was in with the older kids who knew how to hack cell phones, who also accepted Jordan, Jordan was in with the cool kids and things were getting exciting. Other things I started learning how to do were diagram and learn a lot about phone systems. We called it freaking back then. Of course, you spelled it with a PH because you were very cool and elite. And what I started to realize was cloning cell phones was really fun. And listening to cell phone
Starting point is 00:09:05 conversations was really easy. You know, I think I had like an NEC P301 or an NEC P300 or both. And you could somehow you could get that to scan cell phone channels and you could listen to one side of the conversation. I think it was just one side. You could scan for channels because everything's analog. Nothing's encrypted. Nothing's really secure. And I thought that was just one side. You could scan for channels because everything's analog. Nothing's encrypted. Nothing's really secure. And I thought that was fascinating. But, you know, you would lose them as they went out of reception. And I think I really do remember you were only getting one side of the conversation. Jordan continued to play around with the phones,
Starting point is 00:09:37 trying to hack pay phones and cell phones and landlines, everything. One day he saw a telephone repair truck parked. Of course, this caught his attention. Jordan was super into phone hacking at this point and would have loved to get his hands on some of the pro tools that a lineman would have. So Jordan watched the lineman go off to lunch and he snuck over to the truck. He saw an Ameritech handset, the ones linemen's used to test telephone boxes with. He grabbed it and ran. And it has alligator clips, the orange handset, right? It has alligator clips on the end. So I went in and then I made a hex wrench or whatever kind of wrench it was to open those green boxes on the side of the road. And there was one that had bushes near
Starting point is 00:10:24 it and they hadn't trimmed the bushes in a while. And there was one that had bushes near it. And they hadn't trimmed the bushes in a while. They're supposed to do that, but they didn't. So I could dump my bike and sit in or near the bushes and not be spotted from the road, open up the green box, plug the alligator clips onto whatever line pair I wanted, and I could listen to conversations all day in my neighborhood. And I would spend like four and six hours listening to conversations in my neighborhood.
Starting point is 00:10:46 Jeez, spending that many hours listening to people's conversations. How weird. A lot of conversations were boring calls. Someone calling their spouse, what's for dinner, honey? Or do you need anything from the store? That kind of stuff. But as Jordan hung out listening to these calls, he started to get hooked on one guy in particular. This guy who made a lot of calls in his neighborhood was going through a divorce and living with his mom. He would whine to his mom or his aunt, I guess, all the time on the phone. He would whine to his sister on the phone. He would act really tough with his friends on the phone. And when he was talking to his soon-to-be
Starting point is 00:11:25 ex-wife he was just outright hostile and I remember thinking even at age 13 age 14 if he just talked to his soon-to-be ex-wife the same way he talks to his sister or his mom you know he wouldn't be in this situation which is kind of a funny insight for a adolescent tween you know to have and so I listened to every bit of this guy's phone calls that I possibly could. I mean, I remember my butt was just hurting. I would go out even if it was raining. This sneaky peek into the personal lives of adults changed Jordan a little. It was enlightening and educational to hear real conversations like this. But what was interesting about it for me as a kid was when you're a kid, you don't get to
Starting point is 00:12:10 participate in adult conversations. And if stuff's getting heavy, you're not around. They wait for you to leave or they tell you to leave. So this was the first conversation or set of conversations where I was actually hearing what adults were really like. And I remember in my young brain, adults, and this guy especially, transformed from this sort of two-dimensional caricature to a real person with feelings and situations and problems and concerns and ideas just like me. And coming from the position of a self-centered kid,
Starting point is 00:12:42 that was a novel revelation. It made no sense to me at first, and then it slowly opened me up. And it allowed me to look at people in a completely different light and have more empathy. And I remember taking these skills with me to school and talking with more adults and them saying like, oh, you're so ahead of your time. I was learning so much from all of these phone conversations. And that's what really got me interested in people. And once you get interested in people, but you're at the age where mischief is really taking root, the next logical step is social engineering. Jordan continued to listen to phone calls for a while and was still actively
Starting point is 00:13:18 uploading text files to BBSs full of bomb making recipes. And he thought maybe this isn't a good idea. Maybe the cops are watching me upload this stuff. Maybe it's not so cool to put all this explosive information on the BBSs. But the cops didn't contact Jordan. They just left him alone. But I have no doubt that they were following my connections and my people online. And I remember being on the phone chatting voice, as we used to say, with some of the people who are operating other boards, and they would be like, wait, there's somebody at the door. And I remember them being like, hang up the phone,
Starting point is 00:13:53 and then I wouldn't hear from them for like weeks. And I'd be like, what happened? He'd be like, dude, the FBI came. I can't talk to anyone. I'm not doing anything. The board would go down, you know, all that stuff. These guys would get so scared. So it was fun for me in an exciting way because I was just on the outside of this. As the forums he would frequent would go down, he started checking out some other websites and forums that he knew about. And when Jordan started learning about something, he has a tendency to dive deep into it. I also, of course, was looking at the way that credit card systems work and payment systems work. And I had this little racket going
Starting point is 00:14:31 where I could order books using a money order. And I could wait for them to get the money order and wait for them to go and take care of the money order and deposit it, or so they thought, and send out the stuff. And there was this little lag between then and when. And I would call to get confirmation. Most people don't do that. They just wait for things to be shipped to them. I would call, find out they received the money order, immediately bike over to the drugstore and
Starting point is 00:14:58 cancel the money order and get my cash back. And there was just enough of a lag. It was probably just a couple of days where they would send out the stuff, but I would still have my money. They would not know that it had been canceled, but you could cancel it right away, turn in that little stub, and it would be done. And you'd get your cash right then. So it was this easy glitch in the system that was so obvious to me as a kid. And I would get a ton of free stuff, usually books. And I remember I ordered some more expensive stuff. But the problem is you have to have the money first to get a money order. So I was pretty limited in what I was able to do. Soon, though, he got bored with this scam and started learning about other ways to scam
Starting point is 00:15:40 with money. Quick side story. When I was 13, I was mad at my mom about something. She gave me an old checkbook and a pair of scissors and told me to cut up the checks since we weren't going to use those checks anymore and she didn't want thieves stealing the checks. Well, me being mad at her and a little mischief maker myself, I didn't quite understand this and I got into my head that somehow the checks were money. Money is confusing as a kid. It's not clear if the check itself is money or if credit card is money or just cash is money or where the money is and how it moves around and how is it tied to one thing or another. What the heck is money? I was 13 and didn't know. And I took these checks and didn't rip them up.
Starting point is 00:16:24 And after school one day, I went to an ice cream shop and asked, do you accept checks? The clerk said, uh, yeah. So I did my best to try to write a check out. Didn't do it very well at all, I'm sure. I gave it to them. My hand was probably shaking. I had no idea if what I was doing would get me in trouble with this or what, but I just did it. I knew I was breaking some kind of rule just for a sweet lick of some ice cream. The manager came out and looked at the check and told me, where's your mom? I grabbed the check and ran out of there, ripped up the checks and never tried this again. But what if this did work and a small win got me a lick of ice cream with a stolen check? I probably would have done it again.
Starting point is 00:17:14 And who knows where I would have ended up. So I can absolutely see Jordan here having great success with the money orders and to just go ahead, take it further. Look for what's next, what's bigger. And that's when he got curious about credit cards. Being on these dark and seedy forums, he came across full credit card numbers and credit card generators that would just make up fake credit card numbers. He found a credit card number online.
Starting point is 00:17:42 It didn't have an expiration date or name, so he just made it up. He tried to order something small over the phone, paying with credit card, and it worked. He got the item shipped to his house with a stolen credit card. Amazing. Jordan was on to something new here. One time, I decided to go big, and I called from a payphone and used a credit card, and I ordered pizza for next for the next day for my entire middle school and I gave the guy instructions I thought about this ahead of time
Starting point is 00:18:10 I said you know what you need to do come in start putting a pizza down don't go to the office just come straight into the lunchroom start putting a pizza down on every table and eventually one of the women is going to come up to you and say excuse me what are you doing or something like that and that's when you say happy happy birthday, Mrs. Jacobson, because she was the assistant principal who was also our lunch monitor. And I knew that she would be the one to go up and say, excuse me, what are you doing? So what happened, of course, was I couldn't keep my mouth shut.
Starting point is 00:18:37 I told one friend who was a freaking idiot, still is an idiot, actually. And he told everybody. So everybody knew. And when that pizza van showed up, that guy got mobbed. And kids started housing that pizza. And, of course, when the principal came up, assistant principal came up and said, what are you doing? He said, happy birthday, Mrs. Jacobson. And the whole school started laughing.
Starting point is 00:19:00 And she was pissed. She took him to the office. And the police came. and they were unhappy. And eventually they called me into the office multiple times. They blamed everyone but me. And eventually they had nothing on me other than rumor. And they were going to take one of my other friends who didn't do anything. He had nothing to do with it. They were going to take him down. They said, we're going to expel you. Seeing someone else getting in trouble for his crime, he had to come clean. The cops said, well, all right, I want to find out, how did you do this? And I explained everything. And they said, man, we got to tell the FBI because you used a card that belonged to
Starting point is 00:19:43 somebody else. We can't reach the person who owns the card. And I kept saying, look, I made the card number up. You're using a name. Of course you found somebody with that name in Florida. It's a coincidence. I used a fake name. What are you talking about? And they just could not wrap their minds around this.
Starting point is 00:19:58 So the FBI agent came, and I'm sure he was pissed because he had to drive up from the office in Detroit to interview a 14 year old kid. And he said, look, after I explained everything, he said, look, you're seemingly pretty intelligent. Why did you do this? And I said, I wanted to pull a fun prank. And he goes, this is going to get you in deep trouble. And he said, but you should focus your energy on something else. I'm not going to do anything with this. You got to figure out how to pay back the damages for the pizza. You've got to call the pizza place. You've got to deal with
Starting point is 00:20:28 this. I'll deal with the credit card company. They might want to do something with this, but I doubt it. It's petty, but keep your nose clean, man. You probably have a bright future ahead of you if you stop pulling this crap. And it made sense to me, right? It made sense to me. Every other adult was just pissed. They were embarrassed. Their ego was damaged. This was the only guy who was like, huh, this is not the dumbest thing I've ever had to investigate, right? And that, to me, gave me a little boost of confidence, not to keep doing bad stuff, but to maybe focus on something healthier instead.
Starting point is 00:21:01 The assistant principal wanted to throw the book at me. The cops didn't really seem to want to do that. And the FBI definitely didn't want to. And I'm thankful for that. You know, as much as we in this community might make fun of a rib feds, these are not bad guys. You know, they were much more interested in trying to keep me on the straight and narrow and utilize my knowledge than they were in trying to get me into some kind of trouble. And I'm extremely thankful for that because it would have been easier or just as easy for them to just book me for some sort of dumb crime and ruin my chances of getting into college. Instead, I ended up with a letter of recommendation from one of them. I mean, what are the odds of that. When we come back, Jordan tries to find a date in a chat room, but gets so much more than
Starting point is 00:21:51 he bargained for. Stay with us. This episode is sponsored by SpyCloud. With major breaches and cyber attacks making the news daily, taking action on your company's exposure is more important than ever. I recently visited spycloud.com to check my darknet exposure and was surprised by just how much stolen identity data criminals have at their disposal. From credentials to cookies to PII. Knowing what's putting you and your organization at risk and what to remediate is critical for protecting you and your users from account takeover, session hijacking, and ransomware.
Starting point is 00:22:30 SpyCloud exists to disrupt cybercrime with a mission to end criminals' ability to profit from stolen data. With SpyCloud, a leader in identity threat protection, you're never in the dark about your company's exposure from third-party breaches, successful phishes, or infostealer infections. Get your free Darknet exposure report at spycloud.com slash darknetdiaries. The website is spycloud.com slash darknetdiaries. Jordan had a bit of a habit. He really did enjoy going to these shady forums where he saw batches of credit cards with holograms being bought and sold. He watched out of curiosity, but stopped short of participating in criminal activity. His brush with the police and FBI had convinced him not to make fake credit cards. He took a job at the local movie theater
Starting point is 00:23:29 and designed websites on the side. One of the movie theaters that I worked at was owned by the owner of the Detroit Red Wings hockey team. And that guy was one of the wealthiest men in the world, actually, at the time. Certainly one of the wealthiest guys in the United States because he owned the Red Wings, but he also owned Little Caesaresar's pizza and the whole chain and so his
Starting point is 00:23:49 daughter owned this theater and they had some theft or some issue at the theater and so they had security come around and when they couldn't find a regular security guy mike illich the owner don't the daughter's father the owner of the Red Wings and Little Caesar's Pizza, he would send his sort of in-house private investigator. A private investigator investigating a theft at the theater Jordan worked at? That is interesting, right? Jordan was curious to know more about what a private investigator does. So he starts chatting with him. They got to talking about all kinds of stuff. Martial arts, websites, crime.
Starting point is 00:24:28 And one day Jordan mentions to him that he knows how to build websites. Now, that was sort of a rare skill back then. The PI gave Jordan a chance to build a website for his friend's security company. They were kind of doing, on the one hand, security for the neighborhood, the apartment buildings and different commercial buildings. But on the other hand, they were legit vigilante in Detroit, tackle drug dealers, tie them up and take them to the police station and collect a bounty or just arrest dangerous people in the neighborhood. Like that's what these guys were doing back then. And I wanted in, man, that was
Starting point is 00:25:05 exciting. I had a car, you know, at this point. So in exchange for designing a website for this security company, they were training me in martial arts, which were like real martial arts, not like do a kata karate, break a piece of wood. They were showing me stuff nobody was talking about that they had learned in the Israeli military. And I met some hard dudes back then. They were usually ex-military and they were in executive protection. So like we would end up in by we I mean, I would either drive or be like completely back in the office's logistics, but we would have like Ice Cube, Puff Daddy come in for a concert and they would protect him. And I handled like our phone systems, our computer stuff. I did a lot of the driving. I was actually the only white guy for a long time in the office. And I had, I'd gotten straight A's. So my dad who worked for Ford was like,
Starting point is 00:25:53 well, if you get straight A's all three years, uh, till your junior year, till your senior year, I'll rent you an SUV or a car that you want. I chose an SUV. It wasn't that fancy, but you know, he's an employee of Ford. It was. He got a great deal on it. And so I was really thankful for that. So this was a badass car. So I drove around and I drove our agents around in this. And it was easy because a lot of them were busy doing client work, things like that.
Starting point is 00:26:18 And I was able to drive my car and transport agents around. Some of them, honestly, 20, 20 hindsight, probably were not supposed-20 hindsight, probably were not supposed to be driving, probably had either felonies or had lost their license or just didn't have a car. There were some shady people in this executive protection company, and I was pretty clean. I'd get pulled over at night and the cops would be like, all right, have a good day. I mean, this is 90s Detroit, man. If I'm driving around in a nice area in an SUV,
Starting point is 00:26:44 I'm just another white kid in an SUV. If they're driving around at night in an SUV, all black, leather gear, tactical stuff, it's not going to look good. So now Jordan is running with a whole new group of guys. Security guards, martial artists, vigilantes, big buff dudes. And they used to rib me about, hey, are you meeting any girls? You meeting any girls? And I was embarrassed because I wasn't really. And I met girls at the movie theater where I worked, and that was kind of it.
Starting point is 00:27:11 He tried to meet girls, but he just wasn't having any luck. So he decided to try and meet them in a different way. Jordan was online a lot and thought, hey, if I'm online, there's probably girls online too. So he started looking around for them. See, this is decades before Tinder. And at that time, it was extremely weird to sort of make new friends online and try to find a girlfriend. But he popped on AOL to try his luck anyway.
Starting point is 00:27:36 He liked AOL since it had a ton of chat rooms and you could privately message people too. He found his way into like a Detroit chat room or a teenager chat room and tried to find girls in there. AOL turned out to be a goldmine because a lot of girls my age had it and I could use instant messenger. And I told the guys what I was doing that I was meeting girls on AOL instant messenger and they were really enthralled because they were like, wait a minute, there's a way to meet girls on using the modem. I don't understand how do I do this. So I was showing them this and one of the guys goes, you know what, if you want to stand out from other guys doing this, what you should do
Starting point is 00:28:10 is create an account that sounds like a girl and see what the guys say to you. And I thought, that's pretty genius. Social engineering for the win, right? The very, probably one of the very first times I ever even thought about doing anything like that. So I made a screen name on AOL that sounded really girly. And immediately I started getting, I made these basic profiles. I would go in the chat rooms. Immediately guys would start hitting on me. Immediately. A lot of it was really pathetic.
Starting point is 00:28:36 Some of it was really clever. I started taking notes and learning. But then some of it was kind of funny. And I would print out the chat transcripts of these guys hitting on this girl, or me, who they thought was a girl. And the guys at work would have a laugh about it just every single time I went to work. But then his boss stops him one day and says,
Starting point is 00:29:00 wait a minute, this guy says he's a professional photographer and thinks you're a 15-year-old girl and he's a 39-year-old man. Suddenly, Jordan realized this dark side. This was not just some lonely guy. He was being hit on
Starting point is 00:29:17 by child predators. This is a criminal. This is a guy who victimizes young girls. And I had never, I didn't think about that. Being, I think, 15 or 16 at the time, I didn't think about the fact that this was a criminal. I was just thinking he was pathetic. It quickly turned from a good, lazy laugh to,
Starting point is 00:29:39 holy crap, this is really bad. Some of these guys who are hitting on this fake girl are monsters. Suddenly, the conversation took on a different meaning. And I'm not, this is not even like me being flirty or anything. This is just me being like, yeah, I'm 15 and I live with my parents and I like going to the beach. And then they'd be like, hey, I'm a photographer. Do you want to become a model?
Starting point is 00:30:03 Hey, you should come see me. Where do you live? What's your address? When are your parents home? We don't want your parents to be home. Hey, can I take you out on a date? Like really weird stuff. And these guys were unrelenting.
Starting point is 00:30:12 I didn't even have to really feed that much into the chat. And it was extra creepy. So these guys said, wait a minute, we got to figure this out. This is not good. And a couple of the guys, of course, had connections to the local FBI office. Yeah, even though those security guys were your typical tough guy, they had to deal with the FBI before. So they gave Jordan a fax number to an FBI agent.
Starting point is 00:30:33 But the FBI agent wasn't used to dealing with cybercrime. Because I don't think many agents were at the time. Think about this. Since it was computer crime, the Detroit office was like, we're not really sure what to do with this. Now, I crime does the fbi handle that's not done with a computer right i mean but back then this was like a bank fraud unit type of crime you know they they had to figure out who was dealing with stuff because remember aol servers are in virgin or whatever. I'm in Michigan and the other guys in like Ohio. So what local PD has jurisdiction?
Starting point is 00:31:09 Nobody had a clue. So we were faxing these transcripts back and forth and he would send it to D.C. And then like a week or so later, they'd come back with, hey, we need more information on these people. Hey, are you still talking to these people? And I had their screen name so I could easily go and get them and bait them into a chat. And I started working at that time via Agent Forrester and some of the other agents with people in D.C. to hand off my chats to them and so that they could continue them. So after I kept sending them a bunch of chat transcripts, the whoever it was up in the powers that be in Washington, D.C., they decided to get interested because I think at that time they thought, eh, so some kid finds a pedophile on AOL.
Starting point is 00:31:54 Who cares? No harm, no foul. But then when it was like 10 a week and it was me barely doing anything but showing up in a chat room with a name that kind of looks like it could belong to a girl, that became very, very problematic. Right. That became very problematic. It became hard for them to ignore. And I think at some point they figured this is no longer something that we can just sort of sit there and ignore all the time or in good conscience not deal with.
Starting point is 00:32:21 And so I started to send them more and more transcripts and they would call me ironically on a clone cell phone. Some of the time they would call me. They would ask me questions about how, where I'm meeting these people, how I'm engaging with them and things like that. And I don't know this as fact, but I think since they're probably didn't have enough manpower to deal with this, they felt comfortable enough having me send them, I guess you would call it the leads, and progress the conversations to the point where it was very clear
Starting point is 00:32:54 these were no longer innocent parties that were just kind of interested in flirting with someone online. It became really clear and really obvious very quickly that these guys were more than willing to cross state lines and meet with and engage with a minor. And this is long before to catch a predator, now that I think about it, right? was good enough for this guy who lived in Ohio to come up and cross the state line into Michigan in order to engage in clearly inappropriate acts with a minor. And so that got them pretty interested. And so they started organizing with local PD and they started making arrests.
Starting point is 00:33:38 I would hand off the chat so I didn't get all the logistics work. That was kind of on them. And they would do some confirmation of like, so is this going to happen? Are these things going to happen? And this guy, I mean, I saw the transcripts, some of them, and they were pretty explicit after that. Okay, so what are your parents thinking of this? Because, I mean, number one, you're talking to pedos online. And number two, you're an informant for the FBI at 16 years old.
Starting point is 00:34:05 They were just glad that I wasn't blowing anything up or doing any drugs. You know, they were really glad about that. But they were not happy that I was talking to pedos online until they got a call from the FBI, because they originally, you know, when they couldn't reach me on my cell phone or before I even got the cell phone, they were calling the house. Imagine the FBI calls your house. Your parents, first of all, have a miniature heart attack. And then the FBI agent says he's helping us catch people, bad people or whatever they had to say on the phone. And then my mom goes, OK. And of course, they had to sign off on some of this. So it wasn't just like, hey, I'm talking to the FBI and nobody can know about it. It's like, no, your guardian has to say it's okay for my son to be working with you.
Starting point is 00:34:48 They were 50% proud, 30% worried, 20% completely not sure about what the hell was actually really going on and kind of clueless and probably gladly so. Because they were just like, as long as our kid's not dead. Bear in mind, I'm still getting like straight A's in school at this point i've got a job you know there's not a whole lot for them to complain about i just also do this crazy fbi stuff on the side so jordan jordan was still a teenager but he stuck out of public school because he had a cell phone no one really had cell phones in the 90s, much less teenagers. And if you had one, people thought you were like a drug dealer or a secret agent or something. Jordan was a secret agent and had a cell phone.
Starting point is 00:35:34 He even had kind of a get out of jail free card. He had a note signed by the superintendent of schools, the principal, and the FBI agent stating that he could carry a cell phone in school. How cool is that? And a librarian caught me in the hallway calling my mom on the cell phone. And she just was clutching pearls and gasping. And oh, my God. And she ran back in the library and she called the assistant principal. This is a high school, not the one that I embarrassed over the pizza incident.
Starting point is 00:36:03 And Mr. Speech Co., bless him, comes out, hadn't seen the note. This is a pretty early day and me being able to carry the phone in school, comes over and goes, Harbinger, do you have a cellular telephone in your bag? And he's not mad. He's more like incredulous, just like, who the hell is a cell phone? And I have, this is one of my teachers. He teaches a unit on Vietnam. I'm very active in his class. He knows I'm not a drug dealer or an idiot. And the librarian comes out and she's got her, she's got librarian swag.
Starting point is 00:36:34 She can't wait to watch me get busted by the assistant principal. And she's got a smirk on her face that I'll never forget. And I said, yes, I do. And I also have a letter from the principal, the superintendent, and the FBI. And he goes, can I see it? And I said, yes, I do. And I also have a letter from the principal, the superintendent and the FBI. And he goes, can I see it? And I said, sure. The phone or the letter? And he goes, oh, yeah, the phone and the letter, because I think he just wanted to see the phone initially. So I send I hand him the phone and he's he's just like, you know, he looks at the letter. He goes, well, I'll be you sure do. Well, good for you. Are you working with the FBI? What are you doing? This is really cool, man.
Starting point is 00:37:05 Hey, you got it. Hey, can you come by after school? I want to hear all about this. Anyway, and the librarian's face went from a smirk, and I've never seen somebody melt into a puddle so quickly. And it's a vindication that is so rare as a teenage boy that I don't think I'll ever forget it, even as a 40-year-old man who should be over this by now. I'm still not, right? Because she just sort of slunk back into her library and was
Starting point is 00:37:31 just like, wah, I can't believe it. And Mr. Spichko, the assistant principal, was flabbergasted that one of his students was working with the FBI to catch pedos online. And when he aired the story, all the teachers heard the story in short order. And I remember when my phone would ring during class, even the hardest, strictest teacher would just point to the door and I would walk out and take the call. They weren't happy about the disturbance, but it was kind of like,
Starting point is 00:37:58 well, the bat signal is flashing, so Harbinger's got to leave the room now. It was awesome. And after school, he would call the fbi agent and report what he saw and he would call and give reports frequently and since this whole internet thing was still new and the fbi agents didn't quite understand it all jordan just invited them to the house to take a look for themselves so they they came over, went into Jordan's bedroom, sat down and watched as he dialed into AOL, connected to chat rooms, used a girly name he made up and made some kind of entrance into a chat room. And they would see me log in and then they would see it be like bring,
Starting point is 00:38:37 bring, bring. And I would go in the chat room, bring, bring, bring private messages and start popping up all over 14 at a time. You know, I've got my screen tiled with chats and all, you know, nine out of 10 are pedos. And the occasional kid is like, hi, are you pretty? You know, but nine out of 10 are pedos. And this wasn't a weird chat room. This is like a standard generic AOL chat room. He even told the FBI about the cell phone cloning that he was doing. They didn't exactly condone it, but they didn't seem to care either. Maybe they didn't understand what the harm was at that point. It wouldn't be until years later that the FBI would see how cell phone cloning could cause real harm.
Starting point is 00:39:18 But of course, the dark side of this was people were committing crimes using cloned cell phones and then throwing them in the garbage. And the guys I was learning and cloning with, some of them ran businesses where they would jack or buy phones, reprogram them with stolen ESNs, sell them to drug dealers and mafiosos who would use them for a week and then throw them in a dumpster or return them to my buddy who would reprogram them. There was a real dark side to that, but I wasn't messing with all that. You know, I felt like a hero. I was catching pedos online and I didn't even have to go and tackle anyone. I wasn't tough. I was the least tough guy in the security company, but I still had mad respect from all those guys because I was like the local hacker, right? And I wasn't hacking squat. I wasn't doing anything really that complex. I was just sweet-talking knucklehead, pervy pedo predators into crossing state lines and getting arrested
Starting point is 00:40:11 by the cops. I felt like I was doing the Lord's work, dude. Time passed and Jordan grew up a little. He got through high school and decided to go to college to become a lawyer. FBI agents came to a school to give a talk about how to become an FBI agent, and they recommended students become a lawyer or an accountant to do that. But as Jordan studied law, he thought becoming an FBI agent may not pay off a student debt very well, and the forensic work just didn't excite him. So after law school, Jordan moved to New York City.
Starting point is 00:40:43 He passed the bar and got a job as a lawyer on Wall Street. It was 2007. The whole economy was about to implode. One of the higher up partners of this company was Dave. Dave was assigned to be Jordan's mentor to teach him all about being a lawyer on Wall Street. But Dave was never in the office to mentor him. So one day, Jordan asked to meet up with Dave over some coffee. And finally, he had a chance to ask him some of these questions that have been nagging him since day one. And so he took me to coffee in the basement of the building at a Starbucks. And he said, All right, ask me anything you want. He's banging away on his BlackBerry. And I said, How
Starting point is 00:41:19 come you're a partner, you're one of the youngest partners, but you know, you're, you're never in the office thinking he was going to give me the magic cheat code to working from home. And instead he said, well, I work from home sometimes. Yeah. But I mean, mostly I'm out generating business for the firm. And I thought, wait a minute, what does that even mean? So of course I had to know. And I said, what do you mean you're generating business for the firm? And he goes, yeah, you know, I bring in deals. I don't worry about my billable hours. I don't worry about getting a billable hourly bonus, because if I get a bonus for bringing in like two or three deals a year, it eclipses any hourly bonus I would have gotten. So I focus on generating deals. And I said, how come everybody doesn't do
Starting point is 00:41:56 that? And he goes, not everybody's good at that. And I said, well, how do I get good at that? And he goes, you know, you got to go out there and meet people and work your connections and go to events. You know, I'm going to this charity event. I'm playing racquetball here, squash over there. I run over here. I bike over there. I do jujitsu. You know, it's cool, man.
Starting point is 00:42:13 I do a lot of different stuff. Whenever there's an investment banker, I make sure that one of our clients is I'm hanging out with them and then they throw us a deal. It's actually not that hard. I wish more people would do it, but maybe I'm glad more people don't. He goes, if you learn how to do that, you know, you can write your own ticket. You'll make partner earlier. And that changed the way that I look at work forever.
Starting point is 00:42:34 Once again, one person saying the right thing at the right time enlightened Jordan. Instead of banging away at becoming a great lawyer, maybe he needs to change his focus a little. He thought about this. Oh, there's this secret third path that nobody's even thinking about, which has to do with networking and relationship development. This is psychology-based. I can do this. These are people skills.
Starting point is 00:42:57 This is like social engineering, but it's like sales. So I never, a lot of people look at social engineering and they go, yeah, it's kind of like sales only it's a little dark side. I learned social engineering first and I went, oh, it's like sales. It's like social engineering, but it's, it's white hat. I didn't even think about that before. So then I dedicated myself whole hog into body language, nonverbal communication, persuasion, influence, that kind of stuff was my bag. So I took every class I could find.
Starting point is 00:43:28 I read every book that I could. And I started to apply this. And I started trying to generate business for the firm. And of course, I was too young and too junior to be able to do this. And of course, other lawyers, they didn't care to learn this. They didn't know it was important. What they did care was that I went from being a homebody nerd to going out all the time and meeting a ton of women. And people were like, well, wait,
Starting point is 00:43:50 what happened to you? And I said, well, I'm learning all this sales stuff and networking stuff. And it just so happens that when you apply it to the opposite sex, it really works well. And then people, I had their attention, right? Then everybody was like, wait, wait, wait, wait, wait. Teach me what you're talking about here. And that was the genesis of me starting the Jordan Harbinger show and the podcast and the things that I teach in consulting and things like that when I, ironically, train law enforcement, military, and security companies. Yeah, Jordan Harbinger is a podcaster. That's how I met him. One podcaster meeting another. But he's also no stranger to going to DEF CON, and has a lot of friends in the social engineering village there. And he rounds up all this knowledge
Starting point is 00:44:35 he has and experience and interviews a ton of interesting and successful people on his podcast, The Jordan Harbinger Show. And even though he used to dream about becoming someone in the intelligence community, now he trains those kinds of people. intelligence officers tend to do a lot of is manage lots and lots of relationships, sometimes with people who are not completely open, sometimes with people who are maybe a little hostile, and they have to generate trust. And that's exactly what I'm training them to do. I'm teaching people how to know, like and trust you so that you can use influence. And it's fairly straightforward, but it requires a lot of discipline, a lot of practice, and you really have to work on the skills. It becomes a way of being and a set of habits, not a set of hypnosis persuasion tactics that you can apply. You really do need to be socially fluent. I'm training them things that I learned as a teenager that I then turned into things I used in my 20s to date and meet people
Starting point is 00:45:43 that I then once again turned into social engineering and networking and sales. It's really come full circle. Huh. Once punk kid chose wisely. Through a series of remarkable events, he ended up teaching himself to be socially fluent and is now running his own business, making even more money than what he did as a lawyer on Wall Street.
Starting point is 00:46:03 More money than what he could have probably been making if he was a criminal, too. I don't know what the life lesson is here to take away from Jordan. Maybe not to be afraid of pushing the boundaries and the rules, because you might not realize how smart you are until you get caught. Or maybe it's that social skills are a ton more valuable than we think, and that social engineering can be applied for good and have great rewards. But of course, what's interesting to me is that Jordan is constantly trying to learn and grow every day. It doesn't matter how smart he is or feels like he is, he knows he needs to learn more,
Starting point is 00:46:36 which is something I think that's important for us all, no matter how much knowledge we think we have. A big thank you to Jordan Harbinger for sharing his story with us. You can hear so many more of his stories on his podcast called The Jordan Harbinger Show. I recommend the episode where he interviews Richard Clark. And another good one is when he interviews Frank Abagnale. They talk about nation state hacking and social engineering. That's just fantastic. Oh, and don't forget to check out the Darknet Diaries Patreon.
Starting point is 00:47:14 This is where you can get bonus episodes and really help support the show to make more things and greater things and better things. So thank you everyone who is supporting the Patreon because that's really what gives this show wings. This show is made by me, the snow coder, Jack Recider. This episode was produced by Michelle Martin. Sound design by Andrew Merriweather. Editing help from Damien. Artwork this episode by Lauren Olson.
Starting point is 00:47:34 And our theme music is by the jingling Breakmaster Cylinder. And even though my dad still doesn't own a cell phone because he's just tech illiterate, this is Darknet Diaries.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.