user-7973887800-messages.txt
5.2 KB
@Laugh MM Impersonator DWC.
ID:
Names used on Telegram:
├ 2026-10-03 ➜ Laugh MM
├ 2026-10-03 ➜ Rest
├ 2026-09-22 ➜ Rip
├ 2026-08-29 ➜ MM
├ 2026-06-30 ➜ OGU Admin Lucas Grant
├ 2026-06-16 ➜ 7
├ 2026-06-15 ➜ .
├ 2026-06-11 ➜ 9
├ 2026-05-20 ➜ Loki
├ 2026-05-07 ➜ Seven
├ 2026-04-30 ➜ Laugh
├ 2026-04-29 ➜ April
├ 2026-04-03 ➜ Lucas Grant
Usernames used: @fwaresupport, @Replear, @Ogumoderater and @Dopeint
Includes messages sent by the individual on Telegram:
ID:
7973887800Names used on Telegram:
├ 2026-10-03 ➜ Laugh MM
├ 2026-10-03 ➜ Rest
├ 2026-09-22 ➜ Rip
├ 2026-08-29 ➜ MM
├ 2026-06-30 ➜ OGU Admin Lucas Grant
├ 2026-06-16 ➜ 7
├ 2026-06-15 ➜ .
├ 2026-06-11 ➜ 9
├ 2026-05-20 ➜ Loki
├ 2026-05-07 ➜ Seven
├ 2026-04-30 ➜ Laugh
├ 2026-04-29 ➜ April
├ 2026-04-03 ➜ Lucas Grant
Usernames used: @fwaresupport, @Replear, @Ogumoderater and @Dopeint
Includes messages sent by the individual on Telegram:
❤2
to submit a dwc please message the channel either using the button or through this link
https://t.me/dodger?direct
https://t.me/dodger?direct
dndw @athenastaff, i inquired about a fortnite account to this user i asked for mm then tried to get me to buy the account on their site, dodged mm got agressive. sad shit. He has deleted his account now and is probably going to go under a new alias to scam more people. watch out and DO NOT buy accounts from random websites always use a trusted middleman. for questions if something is legit or a scam please send the channel a message!!
website: https://athenamarket.ct.ws/
user: @athenastaff
id: 8831611612
his associates, @sIopes (pad on him coming soon)
@chipable (his main)
@orba37 (his stock channel)
@dndwc (his dwc channel)
website: https://athenamarket.ct.ws/
user: @athenastaff
id: 8831611612
his associates, @sIopes (pad on him coming soon)
@chipable (his main)
@orba37 (his stock channel)
@dndwc (his dwc channel)
@sIopes fake mm service, i heard about this user in another chat. decided to see if hes a fake mm for myself and confirm it, asked him to set uop a split mm service for me and he agreed. this was several months back and then just recently i also saw him posting his account in a channel. all proof will be attached above including the former dwc
former dwc: https://t.me/sIopesfakemm
username: @sIopes
uid: 7045693871
channel/stock: @unfoIIows
note; hes so poor he cant afford shit semis he has to put i's instead of l's
former dwc: https://t.me/sIopesfakemm
username: @sIopes
uid: 7045693871
channel/stock: @unfoIIows
note; hes so poor he cant afford shit semis he has to put i's instead of l's
❤1
would you guys be interested in a quick guide on how to instantly check if your talking with the real mm?
👍2👎1
Dodger
dndw @athenastaff, i inquired about a fortnite account to this user i asked for mm then tried to get me to buy the account on their site, dodged mm got agressive. sad shit. He has deleted his account now and is probably going to go under a new alias to scam…
user-8831611612-messages.txt
192.6 KB
More information about this scammer.
ID: 8831611612
Usernames:
- @mrpullyoshit
- @orba37
Name History:
- 2026-10-06: Deleted Account
- 2026-10-06: Robert
- 2026-10-05: Orba
Static Crypto Addresses on scam website DWC:
- BTC: bc1qyz4lj7rhjsp5d45qddhksrhg47u6vw5fj5p6zd
- LTC: LavuQiMM681QZvnSb29KgAaPiG1Gf6Q3jp
- ETH: 0xfe68A9e43e302838064023468731Cd948Df38350
- SOLANA: rV5zs2nVAMsT4bhZ8uAUgkNzkdWQD6BNK98MmFqj4Ns
Email: athenastaff@proton.me
Can find all their public group messages also in the txt above.
ID: 8831611612
Usernames:
- @mrpullyoshit
- @orba37
Name History:
- 2026-10-06: Deleted Account
- 2026-10-06: Robert
- 2026-10-05: Orba
Static Crypto Addresses on scam website DWC:
- BTC: bc1qyz4lj7rhjsp5d45qddhksrhg47u6vw5fj5p6zd
- LTC: LavuQiMM681QZvnSb29KgAaPiG1Gf6Q3jp
- ETH: 0xfe68A9e43e302838064023468731Cd948Df38350
- SOLANA: rV5zs2nVAMsT4bhZ8uAUgkNzkdWQD6BNK98MmFqj4Ns
Email: athenastaff@proton.me
Can find all their public group messages also in the txt above.
Dodger
@sIopes fake mm service, i heard about this user in another chat. decided to see if hes a fake mm for myself and confirm it, asked him to set uop a split mm service for me and he agreed. this was several months back and then just recently i also saw him posting…
user-7045693871-messages.txt
136.4 KB
More information about this dodger.
ID: 7045693871
Usernames (3/4): @sIopes, @sellabIe, @fakedreex
Names History:
- 2026-10-09: slopes MM • Join @Unfollows
- 2026-10-03: slopes MM; slopes
- 2026-10-02: slopes MM• @Unfollows; slopes• Join @Unfollows
- 2026-08-24: slopes MM
- 2026-07-28: Dimden • Fast Responses; Slopes MM• Join @Alert
- 2026-07-23: SlopesMM
- 2026-07-13: Pavel • @WashCryptos
- 2026-07-04: Dimden MM• Join @Lazuli
- 2026-06-18: dimden
- 2026-03-05: Dimden MM
- 2026-03-03: Dimden
- 2025-07-09: Martin
Secondary Identity:
Name: Thierry.
ID: 6337655057
Username: @SIopes
Name History:
- 2026-10-09: Thierry.
Groups Seen: 1
Mentioning Channels: @unfoIIows, @Gamble4NFT
Evidence:
"[Immortal Chat] [https://t.me/b34ms/895179] | 7/16/2026 5:36:43 PM: Yo I scammed a nigga for 110$ with fake mm" (Message deleted).
Includes all public chat records. DWC.
ID: 7045693871
Usernames (3/4): @sIopes, @sellabIe, @fakedreex
Names History:
- 2026-10-09: slopes MM • Join @Unfollows
- 2026-10-03: slopes MM; slopes
- 2026-10-02: slopes MM• @Unfollows; slopes• Join @Unfollows
- 2026-08-24: slopes MM
- 2026-07-28: Dimden • Fast Responses; Slopes MM• Join @Alert
- 2026-07-23: SlopesMM
- 2026-07-13: Pavel • @WashCryptos
- 2026-07-04: Dimden MM• Join @Lazuli
- 2026-06-18: dimden
- 2026-03-05: Dimden MM
- 2026-03-03: Dimden
- 2025-07-09: Martin
Secondary Identity:
Name: Thierry.
ID: 6337655057
Username: @SIopes
Name History:
- 2026-10-09: Thierry.
Groups Seen: 1
Mentioning Channels: @unfoIIows, @Gamble4NFT
Evidence:
"[Immortal Chat] [https://t.me/b34ms/895179] | 7/16/2026 5:36:43 PM: Yo I scammed a nigga for 110$ with fake mm" (Message deleted).
Includes all public chat records. DWC.
⚠️ DWC
⚠️ Crypto Billis ⚠️ appears to be a seller of various cryptocurrency hardware wallets, operating in markets including Malaysia, Indonesia, and the Philippines. Their product offerings extend beyond Ledger devices and include several other brands, such as Trezor, OneKey, Tangem, SafePal, CoolWallet, Ellipal, Ballet, D'Cent, Satochip, imKey, SecuX, CryptoSteel, and UKISS.
I was reading about the reported attack yesterday when a Reddit user shared the following Bitcoin address: bc1qgqheemzla77pesl227hdtgf5ykz62d0zvld26n At the time, I wasn't sure of the full scale of the attack beyond this particular wallet.
As of October 9, 2026, the address reportedly holds 9.58283747 BTC, valued at approximately $793,795, allegedly drained from multiple Bitcoin wallets affected by the attack.
The funds also appear to be sitting dormant for now, with no apparent outgoing transactions. Another Bitcoin address potentially associated with the attack has also been identified: bc1qjqgwejnp8dc0x2938x9n9954hj97t82unx49dl This second address reportedly holds 92.50620930 BTC, valued at approximately $7,647,396. Matching same pattern of dormant funds.
Together, these two addresses reportedly hold 102.08904677 BTC, valued at approximately $8,441,191.
There have also been reports of approximately $90 million in USDT being frozen in connection with the Ledger CryptoBillis scam, suggesting that the incident may involve substantially more cryptocurrency than the Bitcoin balances identified so far.
Given Crypto Billis's presence in these markets and the range of hardware wallet brands they sell, it raises questions about whether the reported incident extends beyond Ledger devices. However, the full scope of the attack and any connection to other products sold by Crypto Billis remain unclear.
Update with more addresses:
BTC Address: bc1qqnkwurxs99xkx5t4yffqhq3u6qwy0qpjyujtm9 - 111.28199071 BTC Valued at approximately 9,183,639.76 USD
⚠️ Crypto Billis ⚠️ appears to be a seller of various cryptocurrency hardware wallets, operating in markets including Malaysia, Indonesia, and the Philippines. Their product offerings extend beyond Ledger devices and include several other brands, such as Trezor, OneKey, Tangem, SafePal, CoolWallet, Ellipal, Ballet, D'Cent, Satochip, imKey, SecuX, CryptoSteel, and UKISS.
I was reading about the reported attack yesterday when a Reddit user shared the following Bitcoin address: bc1qgqheemzla77pesl227hdtgf5ykz62d0zvld26n At the time, I wasn't sure of the full scale of the attack beyond this particular wallet.
As of October 9, 2026, the address reportedly holds 9.58283747 BTC, valued at approximately $793,795, allegedly drained from multiple Bitcoin wallets affected by the attack.
The funds also appear to be sitting dormant for now, with no apparent outgoing transactions. Another Bitcoin address potentially associated with the attack has also been identified: bc1qjqgwejnp8dc0x2938x9n9954hj97t82unx49dl This second address reportedly holds 92.50620930 BTC, valued at approximately $7,647,396. Matching same pattern of dormant funds.
Together, these two addresses reportedly hold 102.08904677 BTC, valued at approximately $8,441,191.
There have also been reports of approximately $90 million in USDT being frozen in connection with the Ledger CryptoBillis scam, suggesting that the incident may involve substantially more cryptocurrency than the Bitcoin balances identified so far.
Given Crypto Billis's presence in these markets and the range of hardware wallet brands they sell, it raises questions about whether the reported incident extends beyond Ledger devices. However, the full scope of the attack and any connection to other products sold by Crypto Billis remain unclear.
Update with more addresses:
BTC Address: bc1qqnkwurxs99xkx5t4yffqhq3u6qwy0qpjyujtm9 - 111.28199071 BTC Valued at approximately 9,183,639.76 USD
🤯2
Dodger
⚠️ DWC ⚠️ Crypto Billis ⚠️ appears to be a seller of various cryptocurrency hardware wallets, operating in markets including Malaysia, Indonesia, and the Philippines. Their product offerings extend beyond Ledger devices and include several other brands, such…
once again our theory was right, ledger confirms unauthorized hardware in at least one of the infected victims
⚠️ Shopify Checkout Phishing Incident Involving HulkApps
If you made a purchase through a Shopify store on October 10, 2026, your payment information may have been at risk if the merchant was using HulkApps.
A Shopify merchant has reportedly issued a warning regarding customers being redirected from legitimate checkout pages to fraudulent payment pages designed to capture sensitive information, including credit card details.
The security incident appears to involve Shopify stores using HulkApps, although the full scope of the issue, the number of affected merchants, and the extent of any compromised payment information remain unclear.
Additionally, another Reddit user reported that HulkApps' Advanced Wishlist app had also been compromised just a few weeks earlier, allegedly causing storefronts to redirect visitors to spam websites. This raises further concerns about the security of HulkApps' Shopify applications and whether the incidents could be related.
As a precaution, if you made a purchase through a Shopify store during this period and are unsure whether your payment information was affected, consider contacting your card issuer to report a potential compromise and request a replacement card. You should also review your recent transactions for unauthorized charges.
Source: Reddit: Shopify Shops With HulkApps Installed Could Be Affected
Update: According to its official About page, HulkApps identifies itself as a top-tier Shopify Partner, claiming to support more than 120,000 businesses worldwide across a wide range of industries and geographic markets. The company also highlights its work with several high-profile brands and organizations, including Billie Eilish, Vinyl Me Please, Kylie Cosmetics, Coca-Cola Africa, Hulu, and Fox News.
Given HulkApps' extensive customer base, the potential scope of the reported security incident raises concerns about how many businesses and customers could have been affected.
If you made a purchase through a Shopify store on October 10, 2026, your payment information may have been at risk if the merchant was using HulkApps.
A Shopify merchant has reportedly issued a warning regarding customers being redirected from legitimate checkout pages to fraudulent payment pages designed to capture sensitive information, including credit card details.
The security incident appears to involve Shopify stores using HulkApps, although the full scope of the issue, the number of affected merchants, and the extent of any compromised payment information remain unclear.
Additionally, another Reddit user reported that HulkApps' Advanced Wishlist app had also been compromised just a few weeks earlier, allegedly causing storefronts to redirect visitors to spam websites. This raises further concerns about the security of HulkApps' Shopify applications and whether the incidents could be related.
As a precaution, if you made a purchase through a Shopify store during this period and are unsure whether your payment information was affected, consider contacting your card issuer to report a potential compromise and request a replacement card. You should also review your recent transactions for unauthorized charges.
Source: Reddit: Shopify Shops With HulkApps Installed Could Be Affected
Update: According to its official About page, HulkApps identifies itself as a top-tier Shopify Partner, claiming to support more than 120,000 businesses worldwide across a wide range of industries and geographic markets. The company also highlights its work with several high-profile brands and organizations, including Billie Eilish, Vinyl Me Please, Kylie Cosmetics, Coca-Cola Africa, Hulu, and Fox News.
Given HulkApps' extensive customer base, the potential scope of the reported security incident raises concerns about how many businesses and customers could have been affected.
Reddit
From the shopify community on Reddit: Shopify shops with "HulkApps" installed could be phishing customers (ongoing)
Explore this post and more from the shopify community
Dodger
⚠️ DWC ⚠️ Crypto Billis ⚠️ appears to be a seller of various cryptocurrency hardware wallets, operating in markets including Malaysia, Indonesia, and the Philippines. Their product offerings extend beyond Ledger devices and include several other brands, such…
According to Karpelès, the malicious hardware captured the device's display output and button presses to identify the seed phrase, then transmitted it to the attacker over an LTE connection using an eSIM.
Source: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
Source: https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
🚨 MediaMarkt removes Ledger hardware wallets after spy implant concerns.
Customer found unauthorized LTE modules in two Nano X units from German stores. This follows confirmed CryptoBilis reseller cases where implants intercepted recovery phrases via eSIM. ⚠️
Ledger confirmed the CryptoBilis implants, raising supply chain security alarms. 🔐
Sources:
https://tech.yahoo.com/cybersecurity/articles/europe-biggest-electronics-retailer-pulled-185801836.html
https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
Customer found unauthorized LTE modules in two Nano X units from German stores. This follows confirmed CryptoBilis reseller cases where implants intercepted recovery phrases via eSIM. ⚠️
Ledger confirmed the CryptoBilis implants, raising supply chain security alarms. 🔐
Sources:
https://tech.yahoo.com/cybersecurity/articles/europe-biggest-electronics-retailer-pulled-185801836.html
https://www.bleepingcomputer.com/news/security/ledger-confirms-hardware-wallet-spy-implant-behind-crypto-thefts/
Yahoo Tech
Europe’s Biggest Electronics Retailer Pulled Ledger From Its Shelves, and the Former Mt. Gox CEO Says His Wallet Had a Spy Chip…
Europe's largest electronics retailer just pulled Ledger wallets from its shelves, and the former CEO of collapsed exchange Mt. Gox claims his device came with a spy chip inside. Here is what these reports reveal about the risks hiding in the hardware wallet…