BoostedMMO/Chaddy Hacked My Customers 6B

Scammer's profile link: Chad
Amount scammed: 4.4B normal account and 600m or so on UIM + untradables like bowfa full crystal + 800M or so on Ironman
Discord ID + Unique Discord ID: Chaddy
#5555 638754698735648788
Proof that it's their Discord:
Explanation of the trade: See post below
How they scammed: His staff hacked my customers during and after service
Other relevant trade screenshots:


In September 2022, I reached out to the owner of BoostedMMO Chaddy, and we made a pivate deal that we will use them to outsource some of our services. For about 2 months we just used them for questspeeding orders mainly, these orders usually doesn't have much bank value, we didn't have any problem with them. But in early December we started giving them other orders like skilling, bossing, pvm etc, some of the accs have a lot of bank wealth. Chaddy assured me that he only gave our order panel to those workers he trust highly. However, we have been getting multiple accounts hacked since Dec 2. It's been just 9 days and 6 of my orders have got hacked during or after the service, totaling around 6b. One of the account is GIM, one account is ironman.
At first, I thought it's a coincidence, that customer had an insecure/leaked password. I requested them to implement some precaution measures. Chaddy kept defending his workers claiming that the customer is lying about being hacked. But in comparison, I have been using another service for more than a year, $25k spent, no single orders hacked ever. Not to mention that I have local workers working for over 10 years and rarely any issues at all.
Chaddy should be responsible for my loss for the following reasons:
1. His workfollow of assigning workers is flawed. A channel is created for each order, and 6+ of his employees are added to this channel and he would paste the customers login details right in the channel, pinned. I have questioned this workflow, but he thought the employees in the channel so trusted enough and it's not a problem.
2. When the first two hackings happened on Dec 2th-3rd, I have requested him to implement extra security measures by changing customers bank pin when starting the service, DM the worker the new PIN, and change pin after service is done and message the customer new pin. He agreed but didn'tdo it or propoerly notify his emplyees to do it. On Dec 5th, I told them again in the main channel where his trusted employees are. But they still didnt follow.
3. He over trusted his employees without investigating much into each cases when they arise, claiming customer to be lying, and still no actions taken. He basically denied all my reasoning/accusation, he is too arrogant that he wouldnt admit that their system is faulty and no real actions taken after a 3rd hack. I took his words.
4. Today there are three more accounts hacked, and he finally stopped defending for his team, saying that he will investigate. Out of the three orders, two of them they didn't give bank pin to the worker. But Chaddy and his brother had the pin, and his managers have access to our website panel with all the order info including pin. So it's either himself or his managers that he claimed with $1000 deposit. All three orders they didn't change bank pin as supposed to.
Chaddy finally realized the issue is with his team and promised he will pay me back. But he said he didnt have enough money and he will pay in increments and will get back to me asap. I was able to provide him some hint: According to the IP logs on our website, several of his managers accessed the hacked orders on the day when customer was hacked. One of them were accessing the order every day although he was never involved in those orders. All info provided to Chaddy. He said himself that its impossible to know bcause of his way of distributing the account info and that multiple employees had access to the website interface.
After the agreement was made, I went to bed. When I wake up, he was denying everything again just like when the first two hackings happened. I'm very tired of this. I have no choice but to report him.

imgur.com
imgur.com

 

Talk before service
Imgur: The magic of the Internet

 

First 2 hacks happened 2-3 days after. One reported by his worker, during service. One reported by my customer, a few hours after service.

1st hack (Dec 3 my time, 5-6hrs after service):
imgur.com

2nd hack (Same day during service, reported by his own worker)





Chaddy was sure it wasn't his employees so I believed him. Thinking maybe the customer didn't have a secure password.
After some discussion, I asked them to do some precautions.
Imgur: The magic of the Internet

 

After that I was following up some completed orders and found that they weren't changing bank pin after service. So I said this to the team, requesting them to change pin when starting order, we will change pin after service.
Imgur: The magic of the Internet

 

Chaddy confirmed that he did and he will tell his staff about it.
Imgur: The magic of the Internet

 

Chaddy even told me that the co-owner of his server Aloni, who is his brother, is going to jail for attempt robbery.
imgur.com

I got nervous now and asked him again, if those guys are trusted. He changed what he said, saying he didnt trust anyone. And before I gave him these orders, he assured me that the ones who have access to my orders are highly trusted. I told my team to change pin for any completed orders with a big bank. But they started hacking orders during service, or orders without pin. I expressed my concern again how he handled the account details is not good.
Imgur: The magic of the Internet

 

Please use the correct format provided:
READ THIS FIRST! How to Report a Scammer - Report Templates

What are your terms of service on your website and what terms did we agree on? Will reach out on this thread when I wake up.
Have a lovely night!

 

What does my brother’s IRL have to do with this? Just because him going to prison gives you concern if I actually trust my staff?
The meaning I was trying to reach out with is that I don’t even trust my own shadow. But clearly you were too delusional to understand it.

 

Don’t be obnoxious, do also explain how you guys also added authenticator to the customers account. Some orders you placed authenticator, some you didn’t. How would I know which ones I’ll be doing it in and which I don’t?

 

You’ve legit targeted all my staff employees with no probable cause or actual evidence. We’re legit pointing fingers at each other as if we’re in kindergarten. Either you bring valid evidence that me or my team is responsible, or I will bring my evidence when I wake up.

 

On Dec 8, there is a 3rd hack. This case is a bit complicated. As it had no pin and 1.5b bank, so we enabled auth for customer just in case.
After quote, it seems one of the service's price is too high (TOA) so we skipped that. After they finished the rest the order, they updated the status on website to delivered. So customer thought whole order was completed and turned off the auth to log in and check. A few hours later customer reported back to us that the account was hacked.
https://i.postimg.cc/j2yd0YCM/3rd-hack.png
https://i.postimg.cc/HsSFYP5z/Hacked-3-7.png
https://i.postimg.cc/02NHBd3w/Hacked-3-11.png
The customer is at fault that he didn't change password immediately. But considering his password was fresh changed before the service, and that the order wasn't completed in full, and that it's only a few hours hour service that he got hacked, I believe it's still Chaddy's responsibility.
Proof that customer changed password before service
https://i.postimg.cc/9QCPkWzN/Hacked-3-9.png
redacted

 

Simple, we tell you if we enabled authenticator. For this one we even told you before order was even created.
As said, we are available to change pin, enable auth etc, but you need to tell us to. You didn't tell us to, you didnt do it yourself either although I made it very clear that you should.

 

I wish I didn't have to point fingers.
You didn't have a clue how to investigate into the cases because you had multiple people with access. And you were asking me how. All you said is that my customers were lying. More proof is coming how your trusted managers accessed the orders every single day when they are not involved in the order. You denied my proof when putting them in front of you. I dont know what to say.
https://i.postimg.cc/d1YTh6dN/chaddy-50.png

 

The 4th order was a GIM. This was yesterday.
Hacker logged in when gamer was off, and the gamer thought it was the customer. We emailed customer to log off, he contacted us saying he wasnt on the account, he logged in and found his ironman cleaned for most of the valuables, even the bowfa which wasn't tradable.

https://i.postimg.cc/YCyQXQFb/Hacked-4-12.png
https://i.postimg.cc/rFf4m5fM/Hacked-4-9.png
https://i.postimg.cc/Dwt8J6Lk/Hacked-4-5.png
https://i.postimg.cc/66gJNPXX/Hacked-4-10.png

 

5th hack on the same day. Customer had 2b bank, they were going to ask customer transfer some valuables off. But Aloni (the co-owner) said it's ok as he will not give the worker bank pin.


The customer is being careful to insisting on having the auth on after they requested several times to turn off auth.
But the worker constantly ask for code each day I'm not sure why. And out of 10 times customer came to provide code, the gamer is not available maybe 7-8 times.
In the end, the customer turned off auth. And he got hacked shortly after.









The worker said they dont have pin, but Chaddy and his management team do have the pin.
I checked the log of our website service interface to find on that day when the account was hacked, two of his managers accessed the order. According to Chaddy, one of the worker is Peaceful, who became new manager after Aloni left, he accessed the order twice. That was reasonable as he was the one who had been assigning orders to their workers. The other IP was another manager called Iron Baby. He wasn't involved in the orders but he accessed this order a lot.

 

Since we found that they are hacking orders in service, I asked my team to check another order that had a big bank. The order was also for agility and pin was not shared with the worker. Only his managers have access to pin via website interface. Not surprised that the order has down to 161m from 900+ M. This is the 6th order hacked. I wrote email to customer if it was him, as he asked to log in earlier. Customer said it wasn't him. I checked the IP logs of the order. It's exactly as last order. His manager Peaceful and Iron Baby's IP was there today.

I told Chaddy about the IPs, especially Iron Baby had 10+ logins when he wasnt involved in the order, I never saw him talking in any tickets, why did he access these orders. But Chaddy defended that Iron Baby wasn't given access to website inteface until Thursday (7-8). And he wasn't in previous channels where order details were pinned.

Today when I was going through the chat, I found otherwise. Iron Baby was in previous channels, I even asked Chaddy why there had to be so many workers in the channel. Chaddy said he fixed them. But some were not fixed, I took a screenshot to show him and he had to fix them on Dec 3.



From Dec 4-6 there were no hacks.

On Dec 7-8, there are hacked orders again. Turns out Chaddy gave Iron Baby access to website on Dec 7-8 (without letting me know, he said he didnt have to as he will be in full responsibility).

IP screenshots reposted in the end of the report and deleted.


dell spacebar repair

Edit: I was told by customer he is an ironman. Didn't notice earlier. So it's even more proof that the customer didn't just drop all the valuable items just to fake a hack.

 

The rest are chats when we discussed about a solution. Chaddy said he would pay back everything.
And then changed his mind, starting defending his employees even after proof is provided.




keyboardchecker
keyboard test online mac


www keyboardtester com tester






toshiba laptop keyboard problems windows 7

 

I didn't place an order without talking to you first. We talked before I placed any orders, after you assured me that you will only give my orders to the guys who are highly trusted. You didn't mention about terms of service or ask mine. We did agree on the procedures that you or your manager would change pin when starting order if it had a pin. And turn on auth if it didnt have a pin.
You failed to do so. I had to remind your team about it. And they still didn't do it.

It's apparent now who did it had access to our website as workers didnt have pin for some orders. So you gave access to the wrong hands.

After the 3rd hack, I even asked we shouldn't use the website interface for your order, instead DM the account details. You said it would be no difference.
image hosting services

 

You call yourself professional? You legit leaked peoples identity with your IP leakage…

 

I reposted the IPs and then deleted so mods can see.