Episode
01 October 2024 Official episode · Official transcript
investigative
Jack Rhysider revisits the disputed authorship of Sub7, interviewing the Romanian creator known as Mobman, Greg, and Ill Will’s research into the identity conflict.
Topics: Sub7 and NetBus remote-access Trojans, Remote control of computers through malware, Delphi programming and source-code authorship, Malware creation and criminal misuse, Identity impersonation and social engineering, Evidence preservation through source code, backups, hashes, and software credits, Hacker culture, media manipulation, and misinformation, IRC-era malware distribution and pranks
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Jack presents the Romanian Mobman as the actual creator of Sub7, and Mobman independently claims he created all released versions.
Explicit Confidence 97% · Jack Rhysider EP 150 Details
“This is the real Mobman, the actual creator of Sub7”
“Only one person made all the versions, dude.”
Greg claims that he created Sub7, but the episode presents this as disputed and ultimately unsupported by the competing Mobman.
Uncertain Confidence 25% · Greg EP 150 Details
“I made the Sub7.”
“Greg messaged me after that call and wanted another call with me.”
Mobman says he learned Delphi and used it while developing Sub7.
Explicit Confidence 99% · Mobman EP 150 Details
“I wanted to start learning Delphi”
“I learned Delphi by working on Sub7.”
Mobman ASSOCIATED_WITH B.U.G. Mafia
Mobman says his nickname came from the Romanian rap group B.U.G. Mafia and that Sub7 releases were dedicated to the group.
Explicit Confidence 99% · Mobman EP 150 Details
“It comes from a rap band, a Romanian rap band, called B.U.G. Mafia.”
“every single version was dedicated to B.U.G. Mafia.”
Mobman ASSOCIATED_WITH Romania
Mobman says he lived in Romania, is Romanian, and brought B.U.G. Mafia tapes from Romania.
Explicit Confidence 99% · Mobman EP 150 Details
“This was back when I was still in Romania.”
“I brought tapes with me from Romania.”
Mobman says he moved to Canada and identifies himself as being in Windsor, Ontario.
Explicit Confidence 99% · Mobman EP 150 Details
“in ‘97, I moved to Canada with the whole family”
“I’m still in Windsor, still in Windsor, Ontario.”
Mobman says NetBus preceded Sub7 and inspired him to create something similar.
Explicit Confidence 98% · Mobman EP 150 Details
“it all stemmed from NetBus, right? That was — it preceded Sub7.”
“that’s kind of what inspired me to create something similar.”
Mobman says he played around with NetBus before creating Sub7.
Explicit Confidence 94% · Mobman EP 150 Details
“I played around with that a little bit”
NetBus ASSOCIATED_WITH Remote access Trojan
NetBus is described as an original remote-access Trojan with a user interface and server component.
Explicit Confidence 99% · Mobman EP 150 Details
“It was the same thing, a remote-access Trojan rat.”
Sub7 ASSOCIATED_WITH Remote access Trojan
Sub7 is described as a remote-access tool and Trojan horse virus.
Explicit Confidence 99% · Greg EP 150 Details
“I made the Sub7. It’s a remote access tool, and it was a Trojan horse virus.”
Ill Will spent years searching for the real Mobman and eventually found a possible email address and contacted him.
Explicit Direction flagged Confidence 94% · Jack Rhysider EP 150 Details
“Ill Will took it upon himself to find the real Mobman”
“eventually found a clue which led him to a potential e-mail address used by the real Mobman”
Greg USES impersonation
The episode characterizes Greg's long-running claim to be the Sub7 author as impersonating the real Mobman.
Uncertain Confidence 91% · Mobman EP 150 Details
“your biggest accomplishment is impersonating somebody else?”
“Greg pose as Mobman all these years?”
Greg USES social engineering
Greg describes using the false Sub7-author identity to obtain interviews and access at Capital One and Facebook, calling it social engineering.
Explicit Confidence 98% · Greg EP 150 Details
“that’s pretty good social fucking engineering to get all the way”
“I went to Capital One. I went to Facebook.”
Greg ASSOCIATED_WITH Capital One
Greg says he went to Capital One for an interview because people believed he had written Sub7.
Explicit Confidence 96% · Greg EP 150 Details
“I went to Capital One.”
Greg says he went to Facebook for an interview because people believed he had written Sub7.
Explicit Confidence 96% · Greg EP 150 Details
“I went to Facebook.”
Rolling Stone MENTIONS Greg
Jack says Greg was featured in a Rolling Stone article identifying him as the creator of Sub7; this attribution is part of the disputed account.
Attributed Confidence 95% · Jack Rhysider EP 150 Details
“he was featured in a Rolling Stone magazine article saying he’s the one who created Sub7.”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:28:56.234560+00:00