What happened::

The website 0day.today falsely presents itself as an owner of 0days exploits.
This is how the scam works:
1.   The site has a legitimate free section with 1-day exploits (posted by real researchers)
2.   The site has a restricted area with allegedly 0days exploit.
3.   User need to pay USD1000 in order to view the premium section with the 0days.
4.   User can select an exploit from the available list (see screenshot below) and should be able to download the 0day exploit.
5.   Once user pays for the exploit, inj3ct0r disappears and account is blocked

This is a very sophisticated scam. There were some technical details that make me seriously suspect him, but I never believed such a scam could actually exist.
I saw the scam report at https://bitcointalk.org/index.php?topic=343501.0 but is seems like the reporter has doubtful reputation himself (https://bitcointalk.org/index.php?topic=343501.msg3824461#msg3824461)
There is also a video at https://www.youtube.com/watch?v=rHv0MFsHCTM , but I didnt understand why the presented picture is a scam.
The only thing Id like to achieve in this post is the first reliable scam report of 0day.today .
I feel terrible seeing legitimate researchers using this platform to post their work without knowing they are passively donating to crime.
I am willing the share any detail and every evidence so the last person who got scammed would be me.

Reference Link:
https://bitcointalk.org/index.php?topic=343501.0
https://www.youtube.com/watch?v=rHv0MFsHCTM

Amount Scammed: 4.76 BTC/$3000 + 1.76 BTC/$1000 = total 6.5 BTC/$4000

Payment Method:Bitcoins

Proof of Payment:
https://blockchain.info/tx/bceb5cce2a00d31290b3b9cef9e536fe785284252875533020638ac3f18ca0d0
https://blockchain.info/tx/8c90f72c5e14d53d9d7992614468cff43ae933b16f07373654eb301f9a8064fe

PM/Chat Logs:

Screenshots of the final email exchange were my account was blocked:
https://s22.postimg.io/jvmif33pt/Screenshot_from_2016_09_08_21_32_42.png
https://s4.postimg.io/vsyvpl2fx/Screenshot_from_2016_09_08_21_34_03.png

The entire email exchange is listed at http://pastebin.com/yNM5eMb6

Here is what listed on the premium page (the so called exploits)
https://s10.postimg.org/om57egjax/Screenshot_from_2016_09_08_10_43_25.png

Additional Notes: Stay away! The scam is very sophisticated, as the free section seems reliable making this scam allegedly legitimate

Thank you
Anthony

wallas.anthony

Posts

Merits