Scam Alert: @Machine1337
by Tailmon - 16-07-25, 09:01 PM
#1
Another day, another scammer, and this one is completely clueless. 

User @Machine1337 claims to have breached numerous major companies with impressive numbers:
- Steam: 130M+
- Coinbase: 97M+
- AirAsia: 430M+
- Apple: 476M+
- Legiano Casino: 79M+
- myKredit.es: 64M+
- Lacoste: 20M+
- Yahoo: 129M+
- Ticketmaster: 310M+

At first glance, you might think this is some elite hacker breaching major companies daily, until you look closer.
All his listings share identical formatting that resembles some testing SMS logs. Strangely, most contain the same repeated name and phone number. some even has the same UUID pepelmao

I initially considered giving him the benefit of the doubt perhaps he breached a service like Twilio, explaining the consistent format across different companies.
But NO this person likely found a test SMS database somewhere and keeps modifying it to fake these breaches.
He's too lazy to create unique formats for each company or even remove the repeated name and phone number that appear in all his samples.

Code:
grep "Ryan Felix" TikTok.txt Steam.txt Coinbase.txt | wc -l
11361
grep "447873077777" TikTok.txt Steam.txt Coinbase.txt | wc -l
5933

+ The user is boosting his own posts and reputation using alt accounts, most of which are rarely active and have interacted only with his content.

TLDR: User discovered SMS testing logs, replaced a recurring word with an AAA company names, and duplicated the line millions of times.
Reply
#2
How dumb do you have to be to think people will fall for something like this?

[Image: image.png]
Reply
#3
(16-07-25, 09:06 PM)Machine1337 Wrote: u need to show u video of panel sms provider ? lool

Yes please.

I know for fact that these companies uses different SMS service providers. Steam uses Twilio, AirAsia uses Kaleyra, Ticketmaster uses its own Managed SMS system.
Reply
#4
(16-07-25, 09:21 PM)Machine1337 Wrote:
(16-07-25, 09:16 PM)Machine1337 Wrote:
(16-07-25, 09:07 PM)Tailmon Wrote: How dumb do you have to be to think people will fall for something like this?

[Image: image.png]
link 1 : http://damaga377vyvydeqeuigxvl6g5sbmipox...L13vbrykih
link 2 : http://damaga377vyvydeqeuigxvl6g5sbmipox...wx6uNK7YjL
do u need more ?? Whoopass

http://damaga377vyvydeqeuigxvl6g5sbmipox...RCXULzDiww 
amazon  CringeHarold

LMAO, can you explain why all your samples have the same client name, "telesi7368"? Why is this client sending OTP and 2FA codes for Steam, EA, Fiverr, Apple, KuCoin...?
Reply
#5
Why are all the samples you provided now Indian? Is this how the original data looked before you modified it for AAA breaches?
Reply
#6
Here is scam reports about him on XSS

https://xss.is/threads/140702/#post-997413

https://xss.is/threads/136923/#post-971850

[Image: image.png]

[Image: image.png]
Reply
#7
After a private chat with this user, I confirmed he is not only a scammer but also completely clueless.

He claims that “Anchal Malik” and “Ryan Felix” are the owners of the SMS service, which supposedly explains why their names appear repeatedly in all records. According to him, 500 Fortune companies are using this Indian guy’s SMS service, a funny claim.
When he realized the conversation wasn’t going his way, he deleted the chat, but I had already saved it (https://qu.ax/YgsXb.zip).

During our chat, he shared a video of his panel and some random exports. On inspection, it appears to be either a virtual number panel owned by Anchal Malik / Ryan Felix that displays OTP and 2FA codes for their own accounts, or possibly a phishing SMS panel used to impersonate companies though this seems unlikely, as most messages are just OTP codes.

Chat logs: https://qu.ax/YgsXb.zip

What I know for certain is that this data is not related to the companies he claims in his posts. This user definitely does not possess millions of records from these corporations. He is a LARP.
Reply
#8
@Tailmon your investigation skills are amazingly suspicious. good job federal.
Reply
#9
(16-07-25, 11:23 PM)Machine1337 Wrote: And then Fake dbs 😂?

oh no I'm done. His retardness is irritating. Leaving this to @ AnonOne and @ Knox
Reply
#10
[Image: image.png]
Reply


Forum Jump:


 Users browsing this thread: 1 Guest(s)