Darknet Diaries in 3 minutes

Here is The Daily FM summary of the Darknet Diaries that aired on Thursday August 6th. Jack Rhysider used this brief installment to introduce a new long-form project called Low, centered on a man named Zachariah and a story Jack says became the most difficult he has ever reported. [1]

Rather than delivering a typical standalone cybercrime investigation, Jack explained the unusual history behind the project. Zachariah had told him an account of his life that Jack described as wild, brutal, dark, and often hard to believe. Jack says the details were so disturbing and complicated that he kept returning to Zachariah for more interviews, ultimately spending dozens of hours speaking with him across roughly a year. He was not simply looking for dramatic moments; he was trying to verify details, understand Zachariah’s motivations, and figure out how the events fit together. [2]

The central mystery, and the episode’s most striking point, is that Zachariah suddenly disappeared in the middle of that reporting. Calls and messages went unanswered. Weeks turned into months, then years. By the time Jack recorded this trailer, he said it had been eight years since he last heard from Zachariah. That silence left the project with an unresolved real-world question: what happened to the person at the center of the story, and whether he is safe or even reachable now. [3]

Jack described being pulled in opposite directions over whether the material should ever be released. On one side, the story was evidently compelling enough that he felt it needed to be told. On the other, its subject matter was so emotionally heavy that he repeatedly questioned whether publishing it was responsible. That tension appears to be one of the defining features of Low: it is not framed as a clean, solved case with a tidy conclusion, but as an attempt to make sense of a volatile person and an unsettling story whose narrator vanished.

He also emphasized the extraordinary amount of time involved. Although the interviews happened years ago, Jack said it took him years to shape the account into a finished production. Even after he considered it complete, he spent about another year refining it rather than rushing it out. He said he could only work on it when he was in the right emotional state, suggesting that the material affected him personally in a way most Darknet Diaries investigations had not. [4]

The main takeaway from this trailer is that Low is being presented as a deeply reported, human-focused story rather than a conventional technical hacking episode. The notable surprise is not a disclosed plot twist, since Jack intentionally kept the specifics under wraps, but the scale of his commitment: dozens of interview hours, years of editorial work, and an eight-year absence from the subject himself. Jack’s message was that the story stayed with him because it was difficult, unresolved, and unlike anyone he had encountered before. [5]

Thank you for listening to Darknet Diaries in 3 minutes from The Daily FM. See you next time!

Here is The Daily FM summary of the Darknet Diaries that aired on Tuesday August 4th. This episode told the story of Nicholas Sharp, a Ubiquiti cloud engineer who turned his own company’s weak security practices into both a personal crusade and a criminal extortion scheme.

Jack opened with a strange little confession from someone who stole sandwiches from an office fridge, mostly for the thrill of getting away with it. It was not directly connected to the main case, but it set up the episode’s real question: when does someone cross the line from bending rules to doing real harm? [1]

The main story followed Nick Sharp, who had worked at AWS before joining Ubiquiti in 2018. Ubiquiti makes networking gear like routers, switches, and cameras, and Nick quickly rose through the company’s cloud team. He was smart, ambitious, and reportedly eager to find security problems, sound the alarm, and then be seen as the person who fixed them. By 2020 he was making about $250,000 a year, but he felt underpaid, underappreciated, and frustrated that leadership was not listening to his warnings.

Jack framed Nick’s mindset against the ransomware panic of that period. Companies like CWT and Garmin had been hit hard, with rumors of multimillion-dollar ransom demands. Nick watched these stories and became convinced Ubiquiti was vulnerable too. He believed the company had poor logging, overly broad credentials, weak access controls, and too much trust in shared accounts. The surprising part is that, in some technical ways, he was right. But instead of responsibly escalating the problem, he decided to prove it by becoming the attacker.

Using his normal work access, Nick found powerful credentials in Ubiquiti’s AWS environment. Then, through a Surfshark VPN, he logged in as if he were an outside hacker. He later accessed Ubiquiti’s GitHub repositories and downloaded a huge amount of private source code and development history to his personal computer. During the attack, his home internet cut out, and despite using a VPN kill switch, his real home IP address was eventually logged. That small failure became one of the key clues against him.

Afterward, Nick tried to cover his tracks by changing AWS log retention and renaming sessions to make them look like they belonged to other employees. Then, when Ubiquiti noticed suspicious activity, he was brought onto the internal investigation team. So the person helping investigate the breach was also the person who caused it.

The scheme escalated when Ubiquiti executives received a ransom demand for 25 bitcoin, worth about $2 million at the time, with another 25 bitcoin requested for information about an alleged backdoor. Ubiquiti did not pay. Nick tried to pressure the company by uploading stolen data to Keybase, but Ubiquiti got it removed.

One of the most damaging moments came later, when Nick anonymously contacted journalist Brian Krebs, presenting himself as a whistleblower. He claimed Ubiquiti had downplayed the breach and misled customers, which partly echoed real concerns about the company’s public statement. Krebs published the story, customers panicked, and Ubiquiti’s stock dropped sharply, wiping out billions in market value.

Eventually, forensic investigators connected the incident to Nick’s home network and a personal MacBook. The FBI searched his house, and although Nick claimed he was being framed, he was later arrested. In 2023, he pleaded guilty to damaging protected computers, wire fraud, and lying to the FBI. At sentencing, he tried to recast the whole thing as an unauthorized security drill meant to help Ubiquiti improve, but the judge did not buy it. He was sentenced to six years in prison.

The big takeaway was that being right about security problems does not justify creating a breach, extorting your employer, framing coworkers, or lying to investigators. Nick wanted to be treated like the hero who saw the danger first, but by trying to force the company to listen, he became the insider threat he had warned them about. Thank you for listening to Darknet Diaries in 3 minutes from The Daily FM. See you next time! [2]

Here is The Daily FM summary of the Darknet Diaries that aired on Tuesday July 21st. This episode centered on one of the most personal and disturbing consequences of data exposure: identity theft, and how an obscure data broker called National Public Data became tied to a massive breach affecting hundreds of millions of people.

Jack opened with a story from 1988 that set the emotional tone. A homeless man named William Woods had his wallet stolen by a coworker, Matthew Kierans. Inside were documents like a birth certificate and Social Security card. Matthew used them to slowly become William Woods, building a life under that name for decades: a marriage, kids, a job, bank accounts, even a house loan. The real William lived mostly off the grid, so the fraud went unnoticed until 2019, when he discovered accounts in his name. In an almost unbelievable twist, the bank and police believed Matthew, because he had decades of paperwork, and treated the real William as the impostor. William was sent to a mental hospital, forced to take psychiatric drugs, jailed, and billed $118,000 before DNA finally proved he was the real William Woods. Matthew was later sentenced to 12 years in federal prison. Jack used this as a warning: with enough personal data, someone can effectively steal your life. [1]

The episode then shifted to the hacker known as “USDoD,” later identified as Luan Barbosa from Brazil. Jack described him as erratic, theatrical, and hard to verify, with a strange origin story involving a vanished hospital worker in New York and a supposed vendetta against the United States. Whether true or not, Luan became known for breaching government-adjacent targets. He allegedly helped steal data from U.S. military-related systems, then faked his way into the FBI-linked InfraGard system by impersonating a CEO and scraping contact information for tens of thousands of members.

The National Public Data story came through another character: Salvatore Verini Jr., or Sal, a former Florida deputy who wanted to make TV shows. Jack painted him as someone chasing an entertainment dream while funding it through a data broker business. Sal’s company collected huge amounts of personal information from public records, scraped sources, marketing lists, and other brokers, then sold people-search access. The surprising part was how flimsy the operation appeared: little money in the bank, no cybersecurity budget, and sensitive systems run from home equipment.

That weakness became catastrophic when Luan found an exposed file on one of Sal’s sites containing source code and admin credentials. Because passwords were reused, he accessed National Public Data and stole roughly 277 gigabytes, including billions of lines of names, birthdays, Social Security numbers, addresses, emails, and phone numbers. He tried to sell it online for millions.

Jack’s takeaway was angry and clear: data brokers collect information without real consent, profit from it, and often face limited consequences when it leaks. He noted that Congress briefly considered a major privacy bill after many lawmakers were exposed too, but lobbying weakened it until it died. His practical advice was to assume no one is coming to protect your privacy: use Signal, encrypted email, and privacy-focused browsers, and reduce what companies can collect about you. The most shocking through-line was how a forgotten wallet theft, a reckless data broker, and one hacker’s ego all pointed to the same danger: once your identity data is loose, getting your life back can be nearly impossible. Thank you for listening to Darknet Diaries in 3 minutes from The Daily FM. See you next time!