[SCAMMER] 1337day.com SCAM - FAKE 0DAYS. (mr.inj3ct0r)

[oxyon]

1337day.com is a scam site. They do not have the 0days they are selling for.

Their address is http://blockchain.info/address/1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1

As you can see I purchased the vBulletin 0day with this transaction:

 vBulletin v4.x.x and 5.x.x Shell Upload / Remote Code Execute (0day)

https://blockchain.info/tx/2380e1187dac2c76ddf7430ecf5a0573bc415f595f01e46796c8acf201cfb4f6

I received an email from admin@1337day.com asking for jabber or skype. Here's our logs: (timestamps removed for my anonymity)


1337day
here
 
joshzerlan@jwchat.org
ok, so what about the vBulletin 0day?    

1337day
Hello    

joshzerlan@jwchat.org
Hi   

1337day
Bro please tomorrow , at the moment i back home
today or tomorrow
 
joshzerlan@jwchat.org
what's with the youtube video saying you scammed someone over the MS office 0day?   

1337day
I waited for you all day
this man make video to get stuff for free
many kids idiots
 
joshzerlan@jwchat.org
okay, when will you be able to disclose it?
(not sure what time zone you are in)
 
1337day
today   

joshzerlan@jwchat.org
ok. I'll be available here. thanks   

1337day
respect
add me
 
joshzerlan@jwchat.org
added   

1337day
you use windows?   

joshzerlan@jwchat.org
no
you responsible for macrumors?
 
1337day
yes
you want database?)
 
joshzerlan@jwchat.org
that wasn't done through a 0day
that was done through XSS
 
1337day
no)   

joshzerlan@jwchat.org
http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day
)
my screen)
do you want this database?
 
joshzerlan@jwchat.org
it would make me
more comfortable if i know you actually have a 0day
 
1337day
3 btc and i give you database)
interest?
 
joshzerlan@jwchat.org
show me some proof first   

1337day
proof? you send me 10 btc and you want proof?   

joshzerlan@jwchat.org
you want me to send more   

joshzerlan@jwchat.org
so?
you don't have the 0day.


1337day
and?   

joshzerlan@jwchat.org
posting about scam reports on all the forums now
i'll make sure the #2 search result for 1337day is a scam report
 
1337day
show me   

-----

As you can see, they claim responsibility for the MacRumors attack when it was done by someone using the name 'lol'. That attack was through compromising a moderator account, and making a XSS announcement. The actual hacker of MacRumors has said 1337 didn't do shit with proof:

http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c   

1337day are scammers - do not pay them.

(And yes, this is a hacked account).

[1life]

cool faggot a hacker who got scammed I think their is nothing sweeter, karma is a bitch eh fag

[octopus]

lool why the fuck would you post this here? as if anybody is going to help you recover your 2btc.

consider it a 2btc lesson in not: being a retard, dealing with retards.

[Kouye]

cool faggot a hacker who got scammed I think their is nothing sweeter, karma is a bitch eh fag

Not vouching for OP in any way.
But sometimes people try to register to those services for legit reasons, even though that might be hard to understand.
So reporting here that he's been fucked looks cool to me.

[oxyon]

lool why the fuck would you post this here? as if anybody is going to help you recover your 2btc.

consider it a 2btc lesson in not: being a retard, dealing with retards.

1) it's 10 BTC
2) it's so other people know and don't send any more money to this scammer.
3) I'm not expecting anything back

I've been in contact with another person who has been scammed.

But sometimes people try to register to those services for legit reasons, even though that might be hard to understand.

exactly not everything is black and white.

[1life]

cool faggot a hacker who got scammed I think their is nothing sweeter, karma is a bitch eh fag

Not vouching for OP in any way.
But sometimes people try to register to those services for legit reasons, even though that might be hard to understand.
So reporting here that he's been fucked looks cool to me.

oh ya give me one legit reason for hacking especially a damn 0day exploit? no damn good legit reason!

[1life]

lool why the fuck would you post this here? as if anybody is going to help you recover your 2btc.

consider it a 2btc lesson in not: being a retard, dealing with retards.

1) it's 10 BTC
2) it's so other people know and don't send any more money to this scammer.
3) I'm not expecting anything back

I've been in contact with another person who has been scammed.

But sometimes people try to register to those services for legit reasons, even though that might be hard to understand.

exactly not everything is black and white.

I wish you got scammed for more, fuckers like you ruin the net with your kiddie 0day shit, learn to hack goof if you want to take care of business, kid!

[Kouye]

oh ya give me one legit reason for hacking especially a damn 0day exploit? no damn good legit reason!

I'll give you just one.
It can allow you to seal a weakness in your own service before it's being exploited.

[b!z]

Thank you for the scam report. It would certainly help other people from being scammed.

[oxyon]

bump

[jballs]

cool faggot a hacker who got scammed I think their is nothing sweeter, karma is a bitch eh fag

Not vouching for OP in any way.
But sometimes people try to register to those services for legit reasons, even though that might be hard to understand.
So reporting here that he's been fucked looks cool to me.

oh ya give me one legit reason for hacking especially a damn 0day exploit? no damn good legit reason!

Hey... maybe he is searching for Edward Snowden so we can bring him to justice.

Right?

[oxyon]

Good day.

I am a representative of the portal 1337day.com

Please send me your working vBulletin RCE / shell upload zeroday. You can see from the address that I have paid for it, and wish for it to be delivered to joshzerlan@gmx.com. This is recorded publicly on the blockchain, you cannot dispute I have not paid. Upon asking, you have asked to add me on Jabber, which is mentioned as an official support channel.

I have been in contact with other victims who have been defrauded by you, and you have tried to send them wallet.dat stealers. We have been able to find these victims by accessing the server you uploaded their appdata details to.

You in jabber claim that you have owned Macrumors, however this is clearly not the case as (1) the version on Macrumors is not what your exploit claims to target and (2) the actual hacker has posted evidence that is to the contradictory, saying "1337day didn't do shit" along with a partial dump for proof.

You have one simple brain dead way to clear your reputation - send me the exploit to joshzerlan@gmx.com, and to all the other victims. However, it is clear that you do not have one. Your 0day has been sold many, many times yet there has been ZERO instances where a vBulletin 0day has been used to exploit a forum in the past week. All of recent vB exploits were not from a supposed 0day but through password compromise, other already released exploit, install directory, etc.

1337day are scammers - you've built up a reputation, but you've decided to cash it in by making up fake exploits that you do not have, and cannot deliver.

[Kluge]

This thread... 

What next? FBI agent claims to be assassin, posts pictures of assassinated targets from FBI database as proof, guy pays him for hit, and is arrested instead of having target assassinated? Scammer tag, scammer tag!

[DiamondCardz]

Interesting, oxyon, since you're a scammer yourself. Just of a different, more sick variety.

https://i.imgur.com/Hd1zeE5.jpg

https://bitcointalk.org/index.php?topic=356665.0

[Atruk]

This thread... 

What next? FBI agent claims to be assassin, posts pictures of assassinated targets from FBI database as proof, guy pays him for hit, and is arrested instead of having target assassinated? Scammer tag, scammer tag!

Well, that would be a scam...

[leckey]

There's a moral embedded in this story *somewhere* 

[DiamondCardz]

This thread... 

What next? FBI agent claims to be assassin, posts pictures of assassinated targets from FBI database as proof, guy pays him for hit, and is arrested instead of having target assassinated? Scammer tag, scammer tag!

Well, that would be a scam...

It would, but no-one would scammer tag an FBI agent for it.

[oxxymoronn]

The OP of this thread is a total piece of crap and extortionist. Refer to this thread. https://bitcointalk.org/index.php?topic=356665.new#new

He is trying to blackmail people for $100 at a time and claims he got ripped of 7k trying to buy his hack scripts. I LOVE IT

[Mayasaurus]

The OP of this thread is a total piece of crap and extortionist. Refer to this thread. https://bitcointalk.org/index.php?topic=356665.new#new

He is trying to blackmail people for $100 at a time and claims he got ripped of 7k trying to buy his hack scripts. I LOVE IT

Thank you!

[Stuart]

Hello,


The owners got exposed by d4tabase for apposing they scam because the previous owner of that site made a video showing what they do.


n3twork does not use Jabber either the only jabber ever existed was ak47 address which is my address i have him.

Before you watch the video n3twork also told me some disturbing information about 13337day.


Once you reach or get near to 1000 your account gets blocked.
They refused to give a guy who needed medical treatment money a refund shows in the video.
They make fake vouches and try to make them look legit by attacking posted exploits to the user.
vBulletin contacted me and told me the exploit they claim to have is false.

Here the video anyway

http://www.youtube.com/watch?v=rHv0MFsHCTM


P.S the new owner is AK47 if you would like to contact me regarding d4tabase let me know.