The Cops Had No Idea He Just Stole $1 Million Worth of Crypto🎙Darknet Diaries Ep. 118: Hot Swaps

When Joseph Harris was a teen, he learned that video game accounts and social media handles were worth big bucks on the dark web - if you could take control of them. Thus began his life of crime. He wormed his way into exploits, took control of email and Dropbox accounts, and eventually started sniffing out the keys to valuable crypto wallets. From there, he was only a sim-swap away from stealing millions of dollars.
But his stolen fortunes quickly took a turn.
After the episode, check out Joseph's KZbin channel to see what he's up to now: / @doc
Visit darknetdiaries... for a list of sources, full transcripts, and to listen to all episodes.

[@thatfelloutyourpocketbrori3362]

Genuinely one of the best podcasts

[@chrimony]

Definitely shocking how fast they got to him, while he was still in the hotel room. I'm used to these kinds of investigations taking months or years.

[@honor9lite1337]

🤔🤔🤔

[@DreadHalfling9]

They for sure lied to him about how he got caught

[@MewtwoStruckBack]

Your podcast does such a good job of humanizing black hat hackers to where I want to see them get out of any consequences no matter what or how much they stole.

[@UltimateGaming-ih]

I agree, it would be wild if he got a black hat hacker on that got away with it and keep em anonymous.

[@LaliLali-lj4wt]

G🎉🎉🎉ggg🎉🎉🎉 10:22 😂hf fand and and and the theand theas r r gone in in same same as g in the house of the fg and in theand the f is is f f the house is ff3 and I I to go to the the shop to ff the other 3 f3f ff3 g3 and then ff3f the other ffff 3f3f33fthe ff the was 33333 r 3 in 3333 r3 and f3 f f 3333 3r ftheand fr fr the morning in the r one the 3 f and r 333333333f3333gg3 3 in 3333 f3fff33333 ff3f and 3f3f33fthe 3f3f33fthe you in 3333 g 3 ftheand f333f3 f3333333333fthe gg3 f3f33333 in the 333333f333333333f3333333thethedayandandotherfinthe and 3finisthesamef33f 3f3f33fthe3finisthesamef33f areff3f3f3fffvand33ff33fffff33fffisisff3f3fff3ffffgffg3ggisfffffffffff3ffffffffggffffvff3ff3gfggandfgf333areffgf3ffff3ffffg3fff3f3f3fffg3fff3ff3ff3g33f3ffff3ffff3fgfisthe3f3f3fff3ffgf:29 🎉and and and one one one one in the the f f f f f 🎉fhmyn5🎉🎉🎉😂🎉🎉🎉🎉🎉🎉t🎉🎉g😂ggg🎉😂gggggggggf🎉ggg🎉🎉🎉🎉ggggg🎉g🎉ggggggfggfg😂🎉gg🎉🎉🎉ggg🎉🎉😂g😂🎉🎉g🎉g🎉🎉g😂🎉f🎉g🎉tfg🎉🎉​@@UltimateGaming-ih

[@JohnS-er7jh]

great job! I really like these long duration podcasts (I know it must take a lot of work, researching, etc.). I hope this channel continues to get a lot more subscribers. I am surprised it doesn't have over a million subscribers.

[@0therun1t21]

My priorities of the night just changed, I actually get excited for these videos, thank you!

[@eIicit]

It’s part of a strategy Jack has to disrupt your sleep cycle.

[@0therun1t21]

​@@eIicit That sneaky bastard! Oh well, I love it anyway.

[@pandalife1313]

As a Software Engineer and a Security Analyst enthusiast. Listening to your podcast always makes me be happy, because i always learn something new everytime. I know making the podcast is sometimes very hard, but great work Jack for the concistency💯💯

[@ZzzZzz-yd2je]

As a software engineer no one cares

[@bobDotJS]

​@@ZzzZzz-yd2je As a software engineer, did Jack say he wrote Perl?

[@janet.snakehole]

I got robbed so hard in runescape 😔 prob by this guy 😂

[@Doomtroll]

same here... rip all my Party hats, Santa hats and Halloween masks

[@Etherall_]

Ruru is one of the main videogames I learned valuable cyber skills😂 I’m curious how it went down if you don’t mind me asking?

[@Sagaofsr]

He’s honestly a bastard🤣 makes for a great story though

[@omegarift]

Awesome episode Jack! Such an awesome way to start every Thursday. Just got my stickers the other day and they are SO CLEAN!

[@aarondiaz_14]

This guy is a true hacker. He was as diligent with his opSec as he could, lived frugally and he had actual technical skills. It only took one small mistake to catch him. Really goes to show that crime isn't worth it.

[@someone16116]

yep, if i were him i would've stopped when i got a mil

[@xenon6947]

No he got greedy. Never get greedy.

[@JimboSlice-t5i]

Well, people don't realize that you only need to make 1 mistake, and if that mistake is even slightly important enough to get you caught, you're done. The investigators can make a ton of mistakes and still get lucky and get you, but if you've been the target of an investigation, for any reason, any small mistake can lead to your demise. Oh also, it's only illegal if you get caught.

[@aydenherold443]

[Insert no sleep joke here]

[@jeramyneeley3351]

Was going to go sleep, until DnD hit me in the knee.

[@fakenphonenews4252]

Stress is a mf

[@shtboxgarage]

I am nocturnal

[@jw6809]

My fart woke me up, and the smell is keeping me awake.

[@MW-cs8zd]

My dog is blind and thinks night is day, so I'm up

[@TheJordanComplex]

Me, my sister and Cousin had a scheme to scam people out of their Gaia online accounts and steal all their rare items. We were kids and thought it was genius, but I never thought of it being “Social engineering” until listening to this. I obviously feel bad about it now, but it’s crazy to look back and see how a group of pre-teens could social engineer.

[@jamesf2697]

What did you guys do? This sounds like a video that I usually skip the first part 😂

[@jefft8597]

Jail vs prison, he is correct. I can remember that I was never so happy to leave jail just to go to prison. Of course I am out now.

[@naths3010]

Wow this is the 3rd time I've been the 1st person to view your podcast jack I LOVR THEM!

[@eyezikandexploits]

Ive been watching since your first 4 videos i love it man

[@r.mertens]

I am always fascinated about hearing these stories. One of my favorite podcasts and I am not even into computers, programming or anything else what has to do with this kind of stuff.

[@Spiderfffun]

Great episode. The way he was caught is kinda sad, but he wouldn't have stopped.

[@Panhammer64]

darknet diaries expert mode: Find an episode without a reference to og lizard squad in one way, shape, or form.

[@mujahidali7288]

I can't stop listening to this podcast

[@Panhammer64]

best podcast

[@ernestorodriguez6445]

To add muy 5 cents. Write down your the words of your recovery seed in the wrong order (regardless where you store them), then store the ordering somewhere different. You can even store the ordering digitally as, by itself, cannot be used to recover the seed. If you use a long seed, it will still be very difficult to work out the right order in case the words get compromised.

[@eyezikandexploits]

Or hash with another passphrase you only remember by heart and only use on that hash

[@ScamCast]

The order of the words can easily be bruteforced. Bad advice.

[@ernesto4166]

@@ScamCast Oh really? If you have 24 words, there are possibilities in the order of 24! (6.2e23). Good luck.

[@ScamCast]

@@ernesto4166 wrong

[@ScamCast]

@ernesto4166 Actually, yea you're right. Happy to admit when I'm wrong. 😵 Sorry I don't maths

[@EmpireFromGroudUp]

I used to scam items on Diablo back in early 2000’s. I would have my friend in the same trading room, and we would have a super random useless item that held 0 value. Than I would offer him a bunch of super valuable items for it and he would decline the offer. Than I would say if anyone can get the item from him I will trade you all this for it. They would trade everything of value they had for the crap item. Than we would both leave the game. Lasted a solid 6 months before people stopped falling for it. I had countless accounts that was simply filled with valuable items. 😅🤦‍♂️🤣

[@dylan.-6527]

You SOB lol. I was scammed that way.

[@stolenboistudios]

been binging your stuff lately, keep it up😊

[@whiteboytows9133]

My mans found a zero day

[@notchildish]

first thursday on the month has become my favorite day 😩

[@Jerhyn7]

Seven words that make algorithms love You.

[@jamesabernethy7896]

I haven't caught many of your last ones on release and haven't got all the way through this yet so sorry if you mention it later. Talking about Crypto makes me think of when hackers were mining bitcoin using computers on a windfarm and were maintaining the software.

[@alexanderdalipagic5674]

Love your podcast Jack

[@ScamCast]

I keep my crypto wallet key in an encrypted password protected archive on my google drive. The password is a long sentence with special characters that I only know. There's only $20 in my wallet though. It's not much but it's honest work. 😏

[@almurray2000]

Thankyou for making these videos. I also like your little intro stories, they remind me of stuff I did in my younger days.

[@ewreck944]

Great content as per usual 👑

[@stevez5134]

i used to work on an vpn and I always said make sure there's a way to completely not leak your IP briefly when VPN drops or what's the point

[@IamWhoIam2023]

Content like this don't come around often I'd want it again and again

[@-devout]

I remember speaking to Doc a few times, always a pleasure. Interesting to finally hear his story and how that GMX and Gmail exploit worked-I always figured it had to do with cookies. Anybody else miss Tamper Data?😭

[@WindthorstLiquorStore]

love ur work thank u

[@GlennsFastReviews]

Is that GMX vulnerability still active? I ask because I have Junk GMX account.

[@miproduction6196]

I used to plot on stealing and reselling dogs (only little ones) but if I never looked at it as social engineering

[@ownplz5632]

Ya gotta know wen to hold em, know when to fold em Jake.

[@ravenfeader]

Know when to walk away know when to run .

[@ttpechon2535]

You never count your money when you're sittin' at the table

[@thepropertypusher]

Best one yet.

[@RomeoJanku]

I love the story

[@kingpest13]

Ive not always been a great citizen, well meaning to the other citizens but in full awareness of how the system was built to keep the rich rich at any cost. Anyway, ive been through jail several times. At no point have i heard about a place known for their awesome jails.... Caged criminals can be crybabies, Arlington jail was downright nice. Decent food, pillows, workout equipment, a half court, a writing desk in your room, you could even have porn mailed in to you from websites.

[@marc-andreservant201]

I found a 0-day once in Canadian Virgin DSL modems with integrated passwords. The algorithm that generates the default passwords and tells the user "your password is ************" was flawed and the RNG used only 32 bits of entropy. Most people don't change their default password. I wrote a modified version of hashcat that would try every password from the 2^32 possibilities and ran it on my Ethereum mining rig (this was before proof-of-stake) for fun. Averaged 30 minutes per Wi-Fi network to get in, and the GPUs were underclocked to save power while mining.

[@Iccid-w7u]

U still work ?

[@marc-andreservant201]

@@Iccid-w7u Yeah, I have a 9-5 job. Mining isn't profitable enough as a sole source of income when you factor in the price of power. Also, on a side note, the BaNQ public library uses AFI 0xC2 and EAS disabled to mark items out on loan so the books don't trigger the alarm on the exit gates of the library. The chips are NXP ICODE SLIX SL2S2002 vicinity anti-theft chips and the password is 0x00000000. I pointed it out to security and I came back a few weeks later, and I could still disable the anti-theft chips with a stock Android phone running the official NFC Tools app from the Play Store (because the password was still eight zeros). Didn't steal anything but they don't seem to care too much about security, eventually some actual thief will rob the library with a stock Samsung phone.

[@chipchipperson8609]

It always surprises me that these little limp wristed hackers are able to survive jail/prison

[@FGFGrateful]

Elmwood is the Farm. That place is easy compared to San Jose Main Jail. Crazy story.

[@Double_Gift-GIbson]

Listening to most of this podcasts it sounds like The FBI have a lot of Bitcoin

[@beautifullybrilliant7542]

That's why I write down the seed phrase and I have a paper wallet in my safety deposit box. Nothing digital done and dusted you can't hack paper

[@waltpierce699]

THIS IS LITERALLY INSANE!!

[@bobDotJS]

Damn, I invested in the Auger ICO back around 2016 or whever it was. That and Golem. I think they both went to 0 eventually. Or maybe this dude stole it from me. Who knows?

[@westy3783]

RuneScape didn’t incorporate emails back then lol. It was straight username and password.

[@xportal9169]

Destroying PC's after using them ?! Why not just using Tails Linux USB?.

[@josholin31]

They explained it. Forensics on the ram. - although I feel like that's a bit paranoid. Even so, if you fill the ram a dozen times with random data, it'd be nearly impossible to get anything. Hdds / ssds are a bit too time-consuming to do that with, imo.

[@Kanknar]

Congratulations is the funniest thing, to say after recovering

[@jchastain789]

Meanwhile bitcoin is at 71k today wtf

[@desireegoulett69]

I was born in San Jose and grew up in the Santa Cruz mountains....lol

[@miproduction6196]

Thank god y’all were on RuneScape and weren’t the ones that hacked me on Maplestory + Combat Arms😂😂😂 *mid life crisis villain revenge arch forms*

[@GlasPerson]

What's the website he is talking about the min 25:00 ?

[@yippingtonryan7772]

Best morning is always Thursday morning (est)

[@Stray_side]

Fucking Augur!! There’s a coin I haven’t heard mentioned for a hot minute.

[@manchesterunitedakamrtread8317]

Tooo much money without violence ooh boy

[@bumlookercheekymonkey3985]

moral of the story: NEVER CHECK OUT OF YOUR HOTEL LEAVE THE ALBUM KEYCARDS ON THE TABLE MAKE LIKE A TREE AND GET OUTTA THERE!!!!

[@miproduction6196]

Like a tree?

[@hoopslaa5235]

What?? That’s OLD. I’m a 17yr airline employee who’s been retired 5yrs so that was 20yrs ago. All your CC for that hotel and your name is on your room card. People had card readers for a long time.

[@miproduction6196]

@@hoopslaa5235 true😅 this dude had me lost, so thank you hahaha. Like what? The second you pay w card or hand over that state issued ID….

[@Orangejuicedidit]

​@@miproduction6196make like a tree and leave , a play on leaf

[@jamesf2697]

I remember how easy it was to recover a Gmail account. I would just email them and say hey I forgot my password and they would be like I'm sorry click here to change your password. Never asked a single thing. 😅

[@filipemecenas]

Damn this ep is hot 🔥

[@fakenphonenews4252]

This will be a fascinating episode, I'd say

[@MW-cs8zd]

I guess it's good Google is phasing out 3rd party cookies?

[@kartelune2730]

A podcast with OccupyTheWeb please

[@j_rainsgoat3929]

He stole bit coin in 2013 where people could be rich today had he left it alone

[@Rafael-oq9vu]

ok mate, i already said this before and i know the lad is busy, but we should start a campaign and get geohot here

[@ttpechon2535]

Geohot?

[@Rafael-oq9vu]

@@ttpechon2535 george hotz

[@dunar1005]

How about repaying those millions in damages?

[@TJXD]

Should've tried to make money with black jack or 21.

[@LuficariusRatspeed]

Unemployed in Greenland

[@apIthletIcc]

Ite so I was doomscrolling again and Jacks beartrap got my foot now im stuck here with another Darknet Diaries 😂

[@ronswanson7885]

55:50 Marinera lmao

[@rubikquitous8482]

Of course its runescape.. lol

[@zhangyi674]

Yeah it is true not even google authenticator is good easy to recover if it is logged in someone's computer

[@xenon6947]

Joseph got greedy.

[@markrix]

The best strategy is to make someone else play

[@Usnveteranstacker]

JACK I LOVE YOU!! ❤❤

[@lispendens]

10:15 Wrong. It's not robbing. It's stealing. Robbing is stealing where you threaten force or use force. Getting into a wallet doesn't put someone in grave risk of serious bodily harm or death. So, maybe next time choose your English words wiser. Lis Pendens.

[@Fatso-to-fit]

Ayoo whattt

[@Netbase2000]

Honestly I don't even care if you emptys some crypto millionere wallet. They have more.

[@jlaudiofan1984]

where you in m8

[@AntiWanted]

Nice

[@delxinogaming6046]

He’s a bank robber

[@robinhammond4446]

Called GOOGLE? They have a phone number for gmail help.

[@jlaudiofan1984]

He was in m8

[@davidthebanana8522]

WOOHOO

[@chrisleaf]

How does someone steal coins that can't be touched

[@csilva8785]

Sometimes, ignorance is a blessing

[@twezo]

Maybe im tripping but bro is saying too much 🤔 great story though 😭

[@eddieweaver7570]

CAN YOU PLEASE PLEASE PLEASE PLEASE PLEASE PLEASE DO A KZbin PODCAST ON MY COMPUTER THE KREMLIN AND ME, PLEAESE, EVERYONE WILL LOVE IT💻

[@Wreckz_Tea]

This all just sounds like bullshit

[@retroatx]

I stopped listening at the point where the kid mentioned RAM memory... Pretty sure that you'll know why

[@Fooktard323]

You mean he mentioned random access memory memory?

[@thewierdolegion3445]

He’s explaining to not only Jack but to the not so technically inclined people who also listen to the podcast. Some people know what Ram means but putting memory on the end doesn’t hurt for people who don’t understand as well.

[@TheHungryCaterpiller]

Recent episodes are just promoting crime! The interviews with sec experts are interesting. But listening to some teenager bragging about how he ripped off innocent people and didn't feel guilty at all is not entertainment

[@ScamCast]

He did his time, said he felt some guilt. Now he's doing honest work. Stop it.

[@FreakuentFryerPs5]

well said@@ScamCast

[@Cindy-sy8fw]

What is the best strategy to enter crypto trading for someone with more or less than $5,000 to invest?

[@Jamiewhite663]

As a beginner, it's essential for you to have a mentor to keep you accountable. I'm guided by a widely known crypto consultant

[@Jamiewhite663]

Mrs Nancy Williams Laplace

[@dagame614]

Yeah that's right I think it's right to invest with professional at least it saves the trauma of too much loses

[@SC-4rqub]

The first step to successful investment is figuring your goals and risk tolerance either on your own or with the help of a financial professional but it's very advisable you make use of professional

[@KN0852]

Isn't she the same Mrs Nancy Williams Laplace that my neighbors are talking about, she has to be a perfect expect for people to talk about her so well.

[@superhacker35]

first

[@fakenphonenews4252]

I have to wonder how often someone changes someone's affiliate urls to their own .. does cookie stuffing still exist, by the way?

[@LafemmebearMusic]

I’m hooked on this podcast… 🪝