[ANALYSIS · CRIME] How P4x Became a Real-World Mr. Robot

Alejandro Caceres revealed in 2024 that he was P4x, the lone hacker behind North Korea’s week-long internet disruption.

His unauthorized 2022 campaign repeatedly knocked the country’s publicly visible websites offline, affecting government portals and the state airline’s booking site.

The resemblance to Elliot Alderson begins with the double life. Caceres ran cybersecurity company Hyperion Gray while privately testing where defensive expertise ends and vigilantism begins.

North Korean operators had targeted him in a campaign against security researchers, apparently seeking their intrusion tools. Caceres reported the attempt to the FBI and later said the response went nowhere

Months later, working from his Florida home, he used custom scripts and rented cloud servers to overwhelm several routers carrying North Korea’s external traffic.

This was not cinematic keyboard magic. It was patient automation aimed at a small, fragile set of systems, producing an outsized national effect.

WIRED reported that Caceres supplied screen recordings and other evidence while the disruption was unfolding. Independent reporting later interviewed him under his real name.

Like Elliot, P4x cast hacking as a personal answer to institutional paralysis. He decided official channels had failed, selected a target and imposed his own consequence.
But the comparison has limits. Caceres was a public entrepreneur, not an isolated fictional vigilante, and he later pitched his aggressive methods to US defense officials.

No evidence shows that Mr. Robot inspired him. The resemblance lies in the uncomfortable question both stories raise: when expertise becomes power, who authorizes its use?

Caceres feared prosecution but found parts of the US government more interested in his techniques. His Pentagon proposal was never formally adopted.

By revealing his identity, he traded the safety of a pseudonym for a political argument: cyber retaliation should be faster, smaller and less bureaucratic.

That makes P4x a convincing real-world echo of Mr. Robot, and a reminder that a compelling motive does not make an unauthorized attack accountable.

@SableIndex | @SableIndexDiscussion

[ANALYSIS · CRIME] Rare Telegram gifts raise insider-access questions

GiftChangesUpdates alleges that people linked to Telegram may have received rare collectibles before others. Some rare numbers can later sell for more.

Everyday users pay to upgrade gifts into numbered collectibles with different designs.

The post highlights #5554: Vlad upgraded it and received #5556, while #5555 was missing. Minutes later, #5555 appeared in an account named Tanya.

Similar gaps are cited around #7776-#7778, where #7777 allegedly appeared later.

GiftChangesUpdates links Tanya to Artem, whom the post describes as a Telegram developer, using matching surnames, city and approximate age range. That connection is unverified.

The post speculates that gift attributes are generated in advance, allowing privileged database access to identify and target rare items.

Telegram has not confirmed the allegations; no server logs or independent audit have been published.

@SableIndex | @SableIndexDiscussion

[FRAUD] Stolen AI Keys Rack Up Nearly $1 Million in Charges

Cybercriminals are stealing developer access keys and reselling them through gray-market AI services, causing nearly $1m in charges before victims notice.

Unit 42 says these “transfer stations” can generate tens of millions of model requests daily. Stolen corporate accounts are sold on dark-web marketplaces, while smaller firms may have little chance of recovering the bills.

@SableIndex | @SableIndexDiscussion