150: mobman 2

Episode Summary

Executive Summary: The episode revisits a long-running identity dispute over the creator of Sub7 malware, correcting a prior interview that featured the wrong “Mobman.” Jack Resider traces how online misinformation, hacker culture, and incomplete fact-checking led to confusion, then interviews the real Romanian creator, who explains Sub7’s origins, why he stayed anonymous, and why he later distanced himself from the tool.

Main Topics: Correction of the original Mobman interview (Priority: 5/5): Jack explains that his earlier Darknet Diaries episode featured a man claiming to be Mobman who listeners later challenged as inauthentic. This episode is framed as a public correction and fact-checking effort. Tracing the real Sub7 creator (Priority: 5/5): A researcher named Illwill spent years investigating the identity behind Mobman and found a Romanian creator who confirms he wrote Sub7 and used the Mobman nickname. Origins and evolution of Sub7 (Priority: 4/5): The real creator describes learning programming, being inspired by Netbus, building Sub7 in Delphi, and gradually adding features after users requested them. Why the creator stayed hidden (Priority: 4/5): The creator says anonymity was important because malware authors could face legal consequences even for creating tools, and he wanted to avoid public exposure and retroactive scrutiny. Greg's competing identity claim (Priority: 5/5): Jack confronts Greg, who insists he is the real Mobman and accuses the other claimant of fabricating evidence, leading to a circular argument over source code, dates, and credentials. Misinformation and hacker culture (Priority: 4/5): Jack reflects on how hacker communities often prank media and spread misleading stories, making rigorous verification essential when reporting on cybercrime history.

Key Arguments: The original interview subject was likely not the true creator of Sub7, despite outward claims and corroboration from some sources. The real Mobman claims Sub7 was created as a programming challenge and prank tool, not initially as a criminal weapon. Sub7 became associated with abuse by malicious actors, which contributed to the creator’s decision to exit the scene. The creator had strong reasons to remain anonymous, including fear of legal consequences and protecting family privacy. Greg’s story collapses under scrutiny because his claimed details conflict with version credits, Romanian references, and other evidence. Hacker culture and media gullibility can amplify false claims, so even well-produced journalism can be misled without enough verification.

Data Points: Podcast episode count: 150 episodes - Jack says the show has reached 150 episodes. Show runtime accumulated: 134 hours - Jack estimates the podcast totals 134 hours of content. Original episode number: Episode 20 - The disputed Mobman story originally appeared in episode 20, titled "Mob Man." Approximate time since first publishing the episode: 6 years - Jack says it has been six years since the original Mobman episode. Year the creator moved to Canada: 1997 - The real Mobman says he moved from Romania to Canada with his family in 1997. Nickname adoption year: 1999 - He says he started using the Mobman nickname around 1999. Estimated number of versions: 12 to 15 versions - During the dispute, Greg claims there were many Sub7 releases, and the transcript references 12-15 versions. Birthday claimed by Greg: October 15, 1980 - Greg asserts this as his birthday during the call, but the transcript later says his arrest record shows a different date. Birthday from arrest record: October 27 - Jack later checks Greg’s arrest record and says it lists October 27 rather than October 15.

Pivotal Quotes: "The best way to get the right answer on the internet is not to ask a question, but to post the wrong answer." — Jack Resider: Opening reflection on how online communities correct misinformation, framed through the narrator’s early internet experience. "I was just a programmer, just trying to learn to program." — Real Mobman: The creator explains his motivation and rejects the hacker label, describing Sub7 as a programming project first. "There's no there's this conflicting story is just not gonna work for me. I've gotta have like a source of truth." — Greg: Greg pushes back during the confrontation, insisting his version of the Sub7 story is the legitimate one.

Implications: The episode shows how cyber history can be distorted by anonymity, ego, and media trust gaps. For listeners and investigators, it underscores the need for primary evidence, not reputation or secondhand claims, when documenting security folklore.