🔞 NSFW 🔞 The American Telegram cybercriminal community and their escapades "OH MY GOD, I'M GOING TO LOOOOOOSE IT ON YOOOOOOU!" edition

[ninturez0]

warning Don't join any sketchy ass Telegram groups with a personal account. Create an alternative account with a disposable/VoIP phone service and adjust the privacy settings accordingly.
I do not condone any of the behavior featured in this thread. Don't post personal information or "Dox". You will be banned.
Also, don't try and get in on the action, or you might be the next one to be kidnapped and beaten and held for ransom.

A Florida teenager who served as a lackey for a cybercriminal group that specializes in cryptocurrency thefts was beaten and kidnapped last week by a rival cybercrime gang. The teen’s captives held guns to his head while forcing him to record a video message pleading with his crew to fork over a $200,000 ransom in exchange for his life. The youth is now reportedly cooperating with U.S. federal investigators, who are responding to an alarming number of reports of physical violence tied to certain online crime communities.

The grisly kidnapping video has been circulating on a number of Telegram chat channels dedicated to SIM-swapping — the practice of tricking or bribing mobile phone store employees into diverting a target’s phone number, text messages and calls to a device the attackers control.

The teen, known to the SIM-swapping community by the handle “Foreshadow,” appears to have served as a “holder” — a term used to describe a low-level member of any SIM-swapping group who agrees to carry out the riskiest and least rewarding role of the crime: Physically keeping and managing the various mobile devices and SIM cards that are used in SIM-swapping scams.

“Yo, Dan, please bro send the 200k,” Foreshadow said in the video, which was shot on Sept. 15 in the backseat of a moving car. Bleeding from a swollen mouth with two handguns pointed at his head, Foreshadow pleaded for his life. A still shot from that video is available here [Warning: the image is quite graphic].

“They’re going to kill me if you don’t,” Foreshadow continued, offering to get a job as a complicit mobile store employee or “plug” to help with future SIM-swaps. “I’ll pay you back. Just let me know what you need. I got you, for real. Any work for free. Whatever. However long you need me, too. I’ll apply to any store you need me to apply to. I can be a plug. I don’t care if I get caught by the cops or anything. I’ll get that money back for you. I used to do that work.”

It’s not clear where in the world the hostage video was recorded. But at one point in the video, the vehicle’s radio can be heard in the background mentioning WMIB, which is a hip-hop station in South Florida that serves both Ft. Lauderdale and Miami.

As Foreshadow’s hostage video began making the rounds on SIM-swapping Telegram channels, a rumor surfaced that Foreshadow had died after being shot in the leg. It soon emerged that Foreshadow had not died, and that he was cooperating with the Federal Bureau of Investigation (FBI). Members of the SIM-swapping community were then warned to delete any messages to or from Foreshadow. One of those messages read:

JUST IN: FORESHADOW IS NOT DEAD!!!!
HES CURRENTLY CO-OPERATING WITH THE FBI DUE TO HIM BEING KIDNAPPED AND AN ATTEMPT TO EXTORT HIM FOR 200K
IF YOU HAVE CHATS WITH HIM CLEAR THEM

Click to shrink...

Foreshadow appears to be a teenager from Florida whose first name is Justin. Foreshadow’s main Telegram account was converted from a user profile into a channel on Sept. 15 — the same day he was assaulted and kidnapped — and it is not currently responding to messages.

Foreshadow’s erstwhile boss Jarik told KrebsOnSecurity that the youth was indeed shot by his captors, and blamed the kidnapping on a rival SIM-swapper from Australia who was angry over getting shortchanged of the profits from a previous SIM-swapping escapade.
The FBI did not immediately respond to requests for comment.

Reached via Telegram, the alleged mastermind of the kidnapping — a SIM-swapper who uses the handle “Gus” — confirmed that he ordered the attack on Foreshadow because the holder had held back some of his stolen funds. In the same breath, Gus said Jarik was “gonna get done in next” for sharing Gus’ real name and address with KrebsOnSecurity.

“No1 cared about that nigga anyway, he snaked targs [targets] and flaunted it everywhere,” Gus said of Foreshadow. “I’ve been fucked over so many times I’ve lost millions. I am just a guy trying to make more money.”

Foreshadow’s experience is the latest example of a rapidly escalating cycle of physical violence that is taking hold of criminal SIM-swapping communities online. Earlier this month, KrebsOnSecurity detailed how multiple SIM-swapping Telegram channels are now replete with “violence-as-a-service” offerings, wherein denizens of the underground hire themselves out to perform various forms of physical violence — from slashing tires and throwing a brick through someone’s window, to conducting drive-by shootings, firebombings and home invasions.

Click to shrink...

src: https://krebsonsecurity.com/2022/09/sim-swapper-abducted-beaten-held-for-200k-ransom/ / (archive) / (archive 2)

Here are the videos that Krebs is too scared to show you:

The American Telegram cybercriminal community
(and their escapades)

Telegram has long been a haven for fucked up individuals of all sorts. Islamic state terrorists, white nationalists, crypto scammers, pedophiles, zoophiles, and many more have chosen Telegram as their place of gathering since the inception of the app, which markets itself as a Very Secure and Private messaging platform, and has received constant media and press attention for all of the fucked up shit that is allowed on the platform. Although these type of communities also have a large presence on Discord, their servers get banned all the time and it is very difficult to keep track of activity.

Cybercriminals and hackers have always been on Telegram, but recent events are uncovering a different side of Telegram's black-hat community. These guys aren't interested in developing malware or breaching and exfiltrating sensitive data like LAPSUS$, they are more interested in going for the money directly, using targeted phishing and SIM swap attacks to get access to online banking logins, credit card info, crypto wallets, Cashapp, Paypal, whatever, or they take advantage of loopholes in E-commerce stores to offer refund/return scam services, or high-value goods for cheap. These aren't kids with an interest in computer programming or cybersecurity, these are low-to-middle-class American kids looking to drop out of school and buy a hot fancy car and the newest iPhone and fuck some hot bitches or whatever.

While you read and watch the videos in the rest of this OP, I want you to keep in mind that these motherfuckers specifically target individuals and groups such as families or small businesses. They actively hunt for those they perceive to be weak, referring to them as "targs" (targets), such as the elderly, the disabled, and the technologically inept. (I don't have the got damn time to learn all that techno-geek-shit, I work 60 hours a week!)

Click to shrink...

As you may have seen above, tensions can escalate between these individuals/groups and bad shit can happen. You can see plenty of beef between random people sprinkled in among all the advertisements for different blackhat services as soon as you join any group dedicated to the topic. Some who are skilled in the art of OSINT offer paid doxing and swatting services, or they'll even advertise literal hits, where they take your money to go fuck somebody up in person. Sometimes, videos are shared or leaked which depict these incidents:

Click to shrink...

It doesn't seem like a very friendly community. You can find countless instances of hostility between members of these groups. I have no fucking idea how these guys get anything done. When you read through some of these groups, you will quickly notice that there is not a hint of coherent discussion. Not even the ones who advertise services seem to be any better. Most of the time, I don't even know what service or information they are selling, because I can't decipher the lingo apart from obvious shit like CC = credit card. I have no idea how someone "new" to this shit would even begin to learn how to actually scam people or fuck with the bank accounts of their "targs".

Click to shrink...

Many people who participate in this type of online crime have extraordinarily poor security practices and are prone to flaunting their ill-gotten gains and their tools of the trade, posting videos of drugs, money, online banking dashboards, blank credit cards, and more. Some go as far as to film themselves withdrawing large amounts of money from ATM machines to prove that they are "legit". I must mention now that many of these groups and channels make use of a feature of Telegram that is supposed to prevent users from saving, copying, or forwarding messages and files from groups that have it enabled.

It isn't working.

Click to shrink...

An unfortunate reality of the situation is that there is a significant amount of school-aged children involved in this scene. They fall into it because they are given both positive and negative attention by older members, and essentially become a meme throughout this community. They are encouraged to talk trash and say stupid shit in public, they are also encouraged to commit lower end crimes for members of the group, sometimes even filming it. One of them was busted by their own mother after someone doxed a little kid and told his mother he was scamming people.

Click to shrink...

I feel really fucking bad for parents in the 2020s.

There is a concerning amount of Telegram groups and channels out there like the ones i've gathered these videos from. Type in any keywords related to SIM swapping, carding, refund scams, or bank logs, and you'll find them. Sorry, but I can't just link you to these places. If you want to see this shit for yourself, strongly consider making an alternative Telegram account. Don't get in on the action, just get a job. You will get scammed, they will accuse you of being a fed, and you could end up being the next dude to get kidnapped and beaten for the world to see.

As economies around the world continue to collapse, and the prices of housing, food and education continue to rise, I feel that many more children and young adults will turn to this kind of criminal behavior to make some quick bread and get expensive shit like iPhones and Xboxes for cheap. This shit feels like its straight out of some criminal cyberpunk dystopian future.

Stop using SMS for 2FA.

 

[FaustineSpirit]

It's sad how many kids get entangled in these communities.
But no wonder, after all, they are the ones who are easiest to manipulate and "bend them" to their own needs.

 

[catmado]

I used to have a telegram account but they banned me. Weird how they crack down on someone who dares change their username or pirate an old game but allows stuff like this to happen. Telegram's staff is super fucking weird and honestly, I advise anyone to not use the platform at all. Wish Signal was more popular even if I don't use that one either.

 

[Brapuccino]

Parents shouldn't be giving their children smart phones and tablets to begin with. Rotting their brains from a young age just because they can't be bothered actually raising them.

 

[Brapuccino]

I used to have a telegram account but they banned me. Weird how they crack down on someone who dares change their username or pirate an old game but allows stuff like this to happen. Telegram's staff is super fucking weird and honestly, I advise anyone to not use the platform at all. Wish Signal was more popular even if I don't use that one either.

Click to shrink...

I read that Signal is funded by either the military complex or alphabet agencies, so I've avoided it.

 

[eternal september]

I read that Signal is funded by either the military complex or alphabet agencies, so I've avoided it.

Click to shrink...

Signal seems better than telegram but that doesn't take much considering both of them are honeypots in the making.

 

[inversionist]

the most perplexing thing about this kinda stuff to me is how these people often seem to treat their "profession" as some sort of flex. Scamming vulnerable individuals is peak useless bottom feeder behavior, and they seem to treat this as "street smarts". I can't seem to wrap my head around how they glorify it.

 

[eternal september]

the most perplexing thing about this kinda stuff to me is how these people often seem to treat their "profession" as some sort of flex. Scamming vulnerable individuals is peak useless bottom feeder behavior, and they seem to treat this as "street smarts". I can't seem to wrap my head around how they glorify it.

Click to shrink...

It's the most serious crime that's accessible to them. So from their perspective it's more like a cool gang$ter crime ring. And it's easy to tell by how much they show off, which is because they're not expecting much consequences and/or they're really stupid.

 

[Adel]

It's the most serious crime that's accessible to them. So from their perspective it's more like a cool gang$ter crime ring. And it's easy to tell by how much they show off, which is because they're not expecting much consequences and/or they're really stupid.

Click to shrink...

Well said.

 

[Kevin Logan]

Seeing little white kids talking like black thugs its both comical and infuriating

 

[lizzyrascal]

Seeing little white kids talking like black thugs its both comical and infuriating

Click to shrink...

A real epidemic on the east coast in general so go figure this happened in florida. so much of the youth in these places gets wrapped up in this type of shit mainly because they think that kind of lifestyle is fuckin cool or endearing. usually starts off with wanting to look hard, but then results in getting wrapped up in really fucked up situations.... which is sad when it can easily be prevented (if the parents aren't crackheads, but they typically are in these urban places)

 

[namba5]

Signal seems better than telegram but that doesn't take much considering both of them are honeypots in the making.

Click to shrink...

Telegram misleads users by advertising itself as private and secure despite quite a bit suggesting the opposite. No such case exists for Signal, which prioritizes balancing ease of use and security/privacy. They've been subpoena'd before, and were not able to turn over any meaningful information - Only the phone number and the date/time it was last active.
Calling Signal a honeypot in the making I would argue is baseless. Telegram is simply not comparable to Signal in any meaningful respect.

I read that Signal is funded by either the military complex or alphabet agencies, so I've avoided it.

Click to shrink...

Tor receives (I think most of their) funding from big agencies too. Doesn't make them honeypots, if anything cops and investigative agents hate services like Signal and Tor because in their eyes they 'exist to protect abusive people and therefore no one should use them.' I recall one of the presentations in the Snowden leaks literally being "Tor Stinks." Those projects get lots of money from big entities because they also benefit from the tech; they just want to have their cake and eat it too - be protected by the tech and also have their own backdoor to fuck over everyone else. The open source nature of the projects makes the second part almost impossible to achieve. Operation Onymous was a massively costly effort to deanonymize websites and users, and many details of the results of LE efforts were questionable. The operation itself didn't even involve a backdoor or deliberate compromise of the software itself.
Jackoffs like spyware watchdog just lash out at anything that isn't "Libre GPLv3 GNU+Linux" software and call it all "spyware." They even call auto-updates malicious. Idiots like them that make absurd sensational claims about software and security should not be taken remotely seriously.
If you need a messenger similar to Signal that doesn't have the phone number requirement, Session should work, but it is not as accessible to the average person.

Anyway, fuck absolutely all of Telegram. Everyone and everything on it and having to do with it is awful and horrible. All the "hackers" on there are just edgy bigoted children who need to be grounded and have their internet taken away.

 

[backjump6]

Reminds me of the similar groups of o9a larpers on Telegram