Besa Mafia OPERATED_BY Yura
Jack identifies Yura as the administrator of Besa Mafia.
Explicit Confidence 99% · Jack Rhysider EP 156 Details
“The administrator of Besa Mafia — his name is Yura”
Episode
18 March 2025 Official episode · Official transcript
bitcoin dark web
Chris Monteiro investigates Besa Mafia, a darknet murder-for-hire scam, discovers exposed private messages and kill orders, and works with journalist Carl Miller and law enforcement to identify and warn targets.
Topics: Darknet markets and Tor, Dark-web scam operations, Insecure direct object reference (IDOR), URL parameter tampering, Broken access control, Enumeration of exposed message identifiers, Automated scraping with cron jobs, Parsing and storing leaked messages, Bitcoin wallet and payment tracing, Online threats and kill-order investigations, Operational security and anonymity of darknet websites
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Besa Mafia OPERATED_BY Yura
Jack identifies Yura as the administrator of Besa Mafia.
Explicit Confidence 99% · Jack Rhysider EP 156 Details
“The administrator of Besa Mafia — his name is Yura”
Besa Mafia ASSOCIATED_WITH darknet markets
Besa Mafia is presented as functioning like a darknet market, with registration, escrow, messaging, and orders.
Explicit Confidence 96% · Chris Monteiro EP 156 Details
“It was just like a darknet market like Silk Road or something like that.”
Chris Monteiro USES Besa Mafia
Chris registered on Besa Mafia, placed a test order, and investigated the site's functionality.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I will register on the website and see how it works.”
Chris Monteiro USES URL parameter tampering
Chris changed message identifiers in the URL to access other users' messages.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I wonder if I change the message ID to something else; change it to 122. I got someone else’s messages.”
Chris Monteiro EXPLOITS insecure direct object reference
Chris exploited an insecure direct object reference by changing an object identifier and retrieving other users' private messages.
Derived Confidence 99% · Jack Rhysider EP 156 Details
“One user should never be able to access another user’s private data such as private messages like this.”
“he just changed one number in the URL.”
insecure direct object reference DISCOVERED_BY Chris Monteiro
Chris discovered the access-control flaw while inspecting Besa Mafia message URLs.
Derived Confidence 98% · Chris Monteiro EP 156 Details
“I looked at my order for taking out Bob the Builder, and I looked at the address bar, and I saw that there was an ID in the address bar.”
Chris Monteiro USES cron job
Chris used a cron job to pull down and process the site's administration data.
Explicit Confidence 99% · Chris Monteiro EP 156 Details
“I basically have a small cron job. I’m pulling them down fully as is.”
Chris Monteiro USES web scraping
Chris scraped kill orders from the site, including in near-real time.
Explicit Confidence 98% · Carl Miller EP 156 Details
“He’s beginning to scrape these kill orders”
Stephen Allwine USES Besa Mafia
Stephen Allwine used Besa Mafia to arrange and pay for a hit against Amy Allwine.
Derived Confidence 96% · Jack Rhysider EP 156 Details
“it was her husband who paid to have her killed”
“someone has paid them $12,000 to have you killed”
Stephen Allwine USES Bitcoin
Investigators found that Stephen's Bitcoin wallet sent the payment to the hitman-for-hire website.
Explicit Confidence 99% · Jack Rhysider EP 156 Details
“his Bitcoin wallet was, in fact, the one that sent the money to the website”
Ron Ilg USES Besa Mafia
Ron Ilg paid Besa Mafia and used the site to arrange a multi-step plan involving his wife and another woman.
Explicit Confidence 98% · Chris Monteiro EP 156 Details
“he’s paying something upward of $50,000 for this”
“The guy had literally already loaded in all the money for a whole series of things that had to happen to Jennifer”
Carl Miller AUTHORED Kill List
Jack says that Carl made the Kill List podcast, which documents the investigation.
Explicit Confidence 99% · Jack Rhysider EP 156 Details
“Kill List is an amazing podcast that Carl made”
Richard Linklater AUTHORED Hit Man
Jack identifies Hit Man as a movie by Richard Linklater.
Explicit Confidence 99% · Jack Rhysider EP 156 Details
“the movie Hit Man by Richard Linklater”
Besa Mafia ASSOCIATED_WITH Romania
The episode links Besa Mafia's operators or affiliates to Romania, but does not establish that Yura himself is Romanian.
Uncertain Confidence 82% · Chris Monteiro EP 156 Details
“There were a series of arrests in Romania which — of the site operators or at least people affiliated with them.”
“continues to enrich Romanian scammers”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:36:37.923844+00:00