Tiktok user _onlywonderboy phishing scam using telegram api

Post here anonymously with absolute privacy. Web server and forum logging is disabled
Forum rules
Feel free to post anything anonymously without fearing for your privacy. All logs have been disabled.
PhishingBuster

Unread post by PhishingBuster » 2025-6-19 04:55

I noticed a recent phishing attack email titled FNB Payment Notification Alert and started digging a bit deeper. The attacker had a website trying to steal email passwords. Email was sent using probably hacked Wordpress. Stolen passwords were sent using Telegram API to a Telegram bot that forwarded them to Telegram user @GodistheGreatest543 "God is the Greatest All". That Telegram user is advertising in their profile Tiktok user _onlywonderboy who may be the only legitimate person linked to this phishing attack.
Tiktok user _onlywonderboy phishing attack using telegram api Tiktok user _onlywonderboy phishing attack using telegram api Tiktok user _onlywonderboy phishing attack using telegram api Tiktok user _onlywonderboy phishing attack using telegram api Tiktok user _onlywonderboy phishing attack using telegram api Is Tiktok user _onlywonderboy the hacker or has his Telegram been hacked and used for phishing attacks? I contact him yesterday but he did not reply to me.



s
Posts: 352
Joined: 2017-7-5 09:58

Unread post by s » 2025-6-19 07:10

Looks like he just deleted his profile picture.

Image

Is he trying to hide his connections to the phishing scam? Was it an admission of guilt?

PhishingBuster

Unread post by PhishingBuster » 2025-6-20 05:35

_onlywonderboy seems to like TikTok videos so I made him one: https://www.tiktok.com/@phishingbuster/video/7517899434462547222

No reply in telegram. Me thinks he knows he got busted. Let's see how long it takes until the police is knocking on his door.

Rando

Unread post by Rando » 2025-6-22 04:02

What a visionary!