1337day.com is a
scam site. They do not have the 0days they are selling for.
Their address is
http://blockchain.info/address/1AWqYR4CCP5j9GEqMNk8b3ZNPPfG5Jniu1As you can see I purchased the vBulletin 0day with this transaction:
vBulletin v4.x.x and 5.x.x Shell Upload / Remote Code Execute (0day)
https://blockchain.info/tx/2380e1187dac2c76ddf7430ecf5a0573bc415f595f01e46796c8acf201cfb4f6I received an email from
[email protected] asking for jabber or skype. Here's our logs: (timestamps removed for my anonymity)
1337day
here
[email protected] ok, so what about the vBulletin 0day?
1337day
Hello
[email protected]Hi
1337day
Bro please tomorrow , at the moment i back home
today or tomorrow
[email protected]what's with the youtube video saying you scammed someone over the MS office 0day?
1337day
I waited for you all day
this man make video to get stuff for free
many kids idiots
[email protected]okay, when will you be able to disclose it?
(not sure what time zone you are in)
1337day
today
[email protected]ok. I'll be available here. thanks
1337day
respect
add me
[email protected]added
1337day
you use windows?
[email protected]no
you responsible for macrumors?
1337day
yes
you want database?)
[email protected]that wasn't done through a 0day
that was done through XSS
1337day
no)
[email protected]http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c 1337day
)
my screen)
do you want this database?
[email protected]it would make me
more comfortable if i know you actually have a 0day
1337day
3 btc and i give you database)
interest?
[email protected]show me some proof first
1337day
proof? you send me 10 btc and you want proof?
[email protected]you want me to send more
[email protected]so?
you don't have the 0day.
1337day
and?
[email protected]posting about scam reports on all the forums now
i'll make sure the #2 search result for 1337day is a scam report
1337day
show me
-----
As you can see, they claim responsibility for the MacRumors attack when it was done by someone using the name 'lol'. That attack was through compromising a moderator account, and making a XSS announcement. The actual hacker of MacRumors has said 1337 didn't do shit with proof:
http://gyazo.com/dc04ae4ecd2ff1eb0a43191f6778369c 1337day are scammers - do not pay them.
(And yes, this is a hacked account).