Jack Rhysider REFERENCES Episode 112: Dirty Coms
Jack recommends Episode 112, “Dirty Coms,” as background on SIM-swapping.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“I did Episode 112. It’s called Dirty Coms”
Episode
31 May 2022 Official episode · Official transcript
black hat cybercrime social engineering
The episode features Joseph Harris describing account takeovers, cryptocurrency theft, SIM-swapping, abuse of email and carrier vulnerabilities, and the Crowd Machine cryptocurrency heist.
Topics: Email-account takeover and recovery abuse, SIM-swapping and mobile-number porting, Social engineering of email and carrier support staff, Session and cookie manipulation, Credential reuse and breach-data searching, Cloud-storage compromise, Cryptocurrency wallet, seed-phrase, and private-key theft, Ethereum and ERC-20 token theft, Client-side JavaScript data exposure, HTTP request manipulation and parameter tampering, Cryptocurrency laundering through Monero, Digital forensics and IP-based investigation
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Jack Rhysider REFERENCES Episode 112: Dirty Coms
Jack recommends Episode 112, “Dirty Coms,” as background on SIM-swapping.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“I did Episode 112. It’s called Dirty Coms”
Joseph Harris USES social engineering
Joseph says he began by socially engineering email providers and account owners.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I started kind of as a social engineer”
Joseph Harris USES Account takeover
Joseph took over victims’ email and gaming accounts in order to sell them.
Explicit Confidence 98% · Joseph Harris EP 118 Details
“take the accounts and then sell them for money”
Joseph Harris USES social engineering
Joseph used victims’ names and addresses to persuade email providers to reset passwords.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“all you need to know is someone’s name and address and you can completely take over their AOL account”
GMX session manipulation vulnerability AFFECTS GMX
The session-manipulation vulnerability affected GMX’s account-reset process.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“This was a pretty serious vulnerability on GMX”
Joseph Harris EXPLOITS GMX session manipulation vulnerability
Joseph used the GMX session-manipulation vulnerability to take over GMX accounts.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“he’d use this vulnerability, get into that person’s e-mail account”
Joseph Harris USES Cryptsy
Joseph accessed a Cryptsy account, converted the altcoin to Bitcoin, and then converted it to PayPal.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I got into someone’s Cryptsy account”
Joseph Harris USES LocalBitcoins
Joseph used LocalBitcoins to exchange stolen Bitcoin for PayPal funds.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“The way he would get the Bitcoin into his PayPal wallet was using LocalBitcoins”
Joseph Harris ASSOCIATED_WITH Lizard Squad
Joseph says he knew people in Lizard Squad and was contacted by one of its members for help accessing accounts.
Explicit Confidence 94% · Joseph Harris EP 118 Details
“I knew some people that I’m not sure if you’ve heard of them; Lizard Squad”
Joseph Harris USES Credential stuffing and password mutation
Joseph searched breach data for passwords and tried common variants and site-specific mutations.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I’m copying these passwords, I’m trying them with variants”
Joseph Harris USES SIM swapping
Joseph learned and used SIM-swapping to take over phones and reset email passwords.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I started dabbling with it”
“I’m getting a text directly to that phone in my hand”
Joseph Harris EXPLOITS Gmail cookie-validation vulnerability
Joseph used fake cookies to make Gmail believe he had previously logged into a victim’s account, enabling password resets.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I was able to get it so it would appear that way for any account”
Gmail cookie-validation vulnerability AFFECTS Gmail
The cookie-validation vulnerability affected Gmail’s password-recovery process.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“One day, he found a bug in Gmail which let him reset anyone’s password”
Joseph Harris EXPLOITS Verizon account-number disclosure vulnerability
Joseph used a Verizon website flaw that disclosed account numbers to obtain the information needed to take over accounts.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I find a JavaScript variable that has the account number just completely disclosed right there”
Verizon account-number disclosure vulnerability AFFECTS Verizon
The account-number disclosure vulnerability affected Verizon’s bill-payment website.
Explicit Confidence 99% · Jack Rhysider EP 118 Details
“Joseph found a page on Verizon’s website which lets you put in someone’s phone number to pay their bill”
Joseph Harris TARGETS Crowd Machine
Joseph shifted from targeting individual crypto holders to targeting Crowd Machine, a company holding cryptocurrency.
Explicit Confidence 98% · Jack Rhysider EP 118 Details
“Instead of targeting people with crypto, why not target companies that have crypto?”
Joseph Harris USES Google Drive
Joseph accessed Google Drive accounts to search for cryptocurrency wallet backups, seed phrases, and private keys.
Explicit Confidence 98% · Jack Rhysider EP 118 Details
“he would find ways into this and start looking around for interesting stuff there”
Joseph Harris USES MetaMask
Joseph used MetaMask to load a recovered passphrase and access a Crowd Machine wallet.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I put that new numeric passphrase in MetaMask, it loads up the wallet”
Joseph Harris USES Private key and seed-phrase theft
Joseph stole cryptocurrency by finding backup seed phrases and private keys in victims’ cloud accounts and source code.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“There was a hack I did that I made millions of dollars essentially by finding a backup seed”
“I access the private key and it has about $17 million in it”
Joseph Harris USES Monero
Joseph used Monero to launder stolen cryptocurrency and obscure its origin.
Explicit Confidence 99% · Joseph Harris EP 118 Details
“I’d change the crypto to Monero”
Augur ASSOCIATED_WITH Ethereum
Joseph describes Augur as an Ethereum-based altcoin and an ERC-20 token on the Ethereum blockchain.
Explicit Confidence 98% · Joseph Harris EP 118 Details
“Augur, which was the first ERC-20 token to be featured on the Ethereum blockchain”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:37:36.150093+00:00