My email got hacked a few years ago and I also found out my PC + router also got hacked, so I am trying to find out the hacker/scammer who was responsible for this. I found out the scammer identity is Ahmed Olabisi Ajayi, a Nigerian scammer in Kuala Lumpur Malaysia.
The info below about Ahmed Olabisi Ajayi and his group are from Radio 419 MegaHertz video + description on youtube.
Ahmed Olabisi Ajayi is the leader of scam group from Nigeria. His group name is Ajayi 419 Cell. He studied in Kuala Lumpur Malaysia at Bostonweb College of Technology & Management. The members of his group are based in Nigeria, Ghana, Thailand, Malaysia. This group did romance scam in 2013. He was arrested in Kuala Lumpur airport in 2013, but unfortunately he was released after he bribed the Malaysian authority.
This is the video when he got arrested in 2013 which unfortunately already deleted now(this video was still available around 6 months ago, so it seems this group trying to delete all info about them) :
Screenshot of his face from the video :
Credit to Radio 419 MegaHertz on youtube.
Below are the members of his group in 2013 :
- Evelyn Oviomaigho
National ID Card 0115101036 Nigeria
National ID Card DT572202922 Nigeria - Oghenekparobo Origbo
National ID Card 0309430034 Nigeria
National ID Card DT078973860 Nigeria - Efe Adu
Passport A00168592 Nigeria
419 scam name: Loveth Efeni
Email: [email protected] - Ogheneruemu Onovugakpor
National ID Card 0135722372 Nigeria - Ahmed Olabisi Ajayi
Passport A00216904 Nigeria Born in Lagos
Passport issued in Abeokuta
419 scam name: Herbert Sakey - Ophelia Ayeh Passport H1352299 Ghana
- Gideon Mantey Drivers Licence MANT2802870201 Ghana
- Oliver Ayisi
Another emails from the video description above :
[email protected]
[email protected]
[email protected]
Bank account they used for money laundry in 2013 :
Ghana Aza account: Guaranty Trust Bank (Ghana) Ltd.
PMB CT 416 Cantonment Accra Ghana, Swift Code: GTBIGHAC, Account Name: Oliver Ayisi 205 1013945 230
This is the info I found about Bostonweb College :
bostonwebcollegepenipu.blogspot.com/2011/
So apparently the directors of Bostonweb College(Nizam Mokhtar and Yarad Ahmed) are scammer.
Bostonweb college was closed on November 30 2017, 4 years after Ajayi got caught. Info about Bostonweb College closed from this website :
Malaysian Qualification Register
List of scammer email and additional info of those email :
[email protected]
[email protected]
https://brendinghat.com/2021/08/30/cecilia-abrahamsson-hi-2/
[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2020-06/20/01442615.40.htm
[email protected]
[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2020-11/08/01665510.157.htm
https://419scam.org/emails/2020-11/12/01667695.56.htm
[email protected]
[email protected]
[email protected]
https://stopscamfraud.com/viewtopic.php?t=10295
[email protected]
[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2019-09/17/01307402.59.htm
[email protected]
[email protected]
https://419scam.org/emails/2013-11/20/00527976.1.htm
[email protected]
[email protected]
[email protected]
https://419scam.org/emails/2021-08/22/01970147.44.htm
[email protected]
[email protected]
https://419scam.org/emails/2021-11/26/02063934.70.htm
https://419scam.org/emails/2022-02/01/02161965.22.htm
[email protected]
https://stopscamfraud.com/viewtopic.php?t=83
[email protected]
https://419scam.org/emails/2021-10/09/02019213.3950.htm
[email protected]
https://stopscamfraud.com/viewtopic.php?t=10766
[email protected]
[email protected]
https://nairaland.com/6387722/fake-scam-citibank-beneficiary-jonesdrefreim
[email protected]
https://stopscamfraud.com/viewtopic.php?t=13844
[email protected]
[email protected]
Another emails with connection to some of the emails above(same passwords, recovery email) :
[email protected](same password with [email protected])
[email protected](same password with [email protected])
[email protected](recovery email of [email protected] and same passwords with [email protected])
[email protected](same passwords with [email protected])
[email protected](same passwords with [email protected])
There are some identity which I found from [email protected] :
instagram.com/levina.la/?hl=en
There is a woman with name Levina La and a guy with name Alosto. Because the language is Swahili, so I think they are from East Africa. I don’t know yet if they are friend/family of Ahmed Olabisi Ajayi or not. Considering they deleted [email protected] so fast, I suspect there is something important in that email and maybe those people are the reason they deleted the email so fast.
List of scammer mac address which I found on my router :
These are list of IP they used to attack my email a few years ago after I regained access :
196.16.117.161
240e:390:1040:c04:246:5d2c:8e00:189b
5.180.221.30
209.234.253.115
175.144.74.160
191.101.244.194
160.116.245.184
107.178.113.119
37.57.90.167
125.212.159.248
186.221.186.107
85.117.56.74
173.195.15.33
46.183.177.83
196.16.205.168
168.80.193.255
191.92.240.36
202.5.36.215
218.68.0.42
160.116.237.121
160.116.236.129
240e:390:6292:6489:a4dd:d7a:9dca:4e90
196.17.123.216
196.16.204.180
196.19.137.100
123.253.67.211
196.19.183.160
160.116.83.61
197.210.70.198
187.190.165.158
189.45.192.4
176.197.5.218
23.236.249.242
163.198.189.50
160.116.83.35
196.19.182.50
107.173.196.102
160.116.83.233
168.81.112.139
107.174.182.242
31.215.40.30
197.211.192.146
Screenshot of attacker IP :
There is 1 IP which I suspect is the real scammer IP : 175.144.74.160. This IP belong to Telekom Malaysia. In the whois info of that IP, there is someone with name Emran Ahmed Kamal. I did a research of that name and I found his name on some website :
On medium website, I found another name : Siti Fuwaizah Mohd Ghazali. Her name also show up in this website :
The scammer also used my email to create an EA account. This is the login history :
The login history were from many different country, but there was only 1 login history with PC, which was from Malaysia(MY).
They also spam my email after I regained access. This is the screenshot and header of one of those spam(I changed my email to Redacted) :
Email header in the pastebin :
There are 2 companies which I found from those spam : Digital Buldogs and Aldaniti.
Digital Buldogs ← missing 1 L. When I searched digital buldogs last year, there was only 1 digital bulldogs website on google :
Right now, when I search digital buldogs, the result is different, there are many digital bulldogs website and thedigitalbulldogs.com is not the top result on google anymore, I don’t know why this happened, maybe there is an error on google.
The address of thedigitalbulldogs from whois info is :
L4-E-2, Level 4, Enterprise 4, Technology Park Malaysia, Bukit Jalil, Kuala Lumpur, Wilayah Persekutuan, 57000, Malaysia
But I found a different address when I searched thedigitalbulldogs on google maps :
Block B, B-3-12, Level 3, Plaza Arkadia, 3, Persiaran Residen, Desa Parkcity, 52200 Kuala Lumper, Wilayah Persekutuan Kuala Lumpur, Malaysia
The address on google maps is weird, it is “Kuala Lumper” instead of Kuala Lumpur.
I found some post on scammer info with similar address like thedigitalbulldogs address(from the whois info) :
About Aldaniti, this is the info I found so far :
Aldaniti Network Limited was founded in 2006 and dissolved in 2009.
Info from this website :
In 2009, Aldaniti International Network Ltd was incorporated. The current director of this company are Rafael Coloma Hidalgo and James Francis Knipe.
There are some other company with those name as the director : Pulpower Ltd and Trigoss Ltd. Trigoss Ltd has one more director beside Rafael and James : Emma Plumley.
Info about Aldaniti International Network Ltd :
Info about Pulpower Ltd :
Info about Trigoss Ltd :
The previous address of Aldaniti, Pulpower, Trigoss was 113a Monnow Street Monmouth NP25 3EG(a gambling company), which is odd because based on google maps, the building on that address is quite small, so I don’t think 3 companies will fit into a small building like that.
The address of those 3 companies changed on March 29 2021 to Regus Falcon Drive Cardiff Bay Cardiff CF10 4RU(an office space rental agency) which is odd too because 3 companies moved to another address in the same day.
The address of those 3 companies changed again on April 24 2023 to Regus One Capital Quarter 1 Capital Quarter Tyndall Street Cardiff CF10 4BZ, it looks like another office space rental agency again.
There is 1 name which I found odd : Yomtov Eliezer Jacobs. He was a first director of Aldaniti International Network Ltd and Pulpower Ltd but his role was terminated not long after he appointed as the director. I did a research about him and I found out he was appointed as a director of 26811 companies so far and the pattern is similar like Aldaniti and Pulpower, he was appointed as director and his role terminated not long after that.
Info about him :
Some people also wondering who is he since 2011 :
https://www.ukbusinessforums.co.uk/threads/who-is-yomtov-jacobs.231023/
This is a post on scammer info about some of the people above :
Info of Aldaniti is a scam/spam company :
Info of someone complained about spam he got from Aldaniti but the authority couldn’t do anything about it :
Because one of Aldaniti address is a gambling company address and Ajayi location is in Malaysia, so I did a research about gambling scam in Asia region. Maybe one of those scam has connection to Ajayi group.
This is some info about gambling scam that I found so far :
- 12 nigerian scammer working with 2 chinese in Malaysia scamming people through illegal online gambling :
12 Nigerians Arrested For Illegal Online Gambling In Malaysia - Nigerian scammer with name Ernest Okechukwu Okanya and Ivory Coast scammer with name Souleymane Konate stayed in Bali Indonesia and scamming people through online soccer betting :
https://indobalinews.pikiran-rakyat.com/bali-nusra/pr-882695832/ngaku-anggota-militer-dan-judi-online-2-wna-nigeria-dan-pantai-gading-dideportasi-karena-overstay - Nigerian scammer with name Awolola Oladayo Opeyemi and Awolola Gbolahan Ayobami based in Malaysia recruited Singaporean women for money mules and scamming people through romance scam :
https://www.straitstimes.com/singapore/courts-crime/jail-for-2-nigerian-members-of-love-scam-who-recruited-sporean-women-as-money
Video :
youtube.com/watch?v=P52j3-W5uWw - Indonesian scammer Apin BK scamming people through online gambling :
https://www.detik.com/sumut/hukum-dan-kriminal/d-6733789/7-fakta-baru-kasus-bos-judi-online-apin-bk
I don’t know yet if some of those scammer are part of Ajayi group or not.
Number 1, I don’t know how those Nigerian scammer met with Chinese people in Malaysia and start working together, I assumed those Nigerian scammer has a leader.
Number 2, Those scammer stayed in Bali for a long time, so that means there was someone who paid their living cost which I suspect they have a leader.
Number 3, From the news those Nigerian scammer are member of scam group based in Malaysia, so maybe their leader is Ajayi.
Number 4, I don’t know if he is involved with Nigerian scammer like no 2 or his group is entirely different scam group.
I found a post of online soccer betting on spamlogger :
https://spamlogger.com/t/link-freebet-depo-10-jadi-20-depo-20-jadi-40/43
Because the Indonesian language is broken, I suspect the scammer is from outside Indonesia, so maybe either Nigerian scammer like number 2 or Indian scammer like in this post :
http://scammer.info/t/garmin-scammer-888-719-5444/51960/7 <-credit to drwat for the info.
My assumption so far, maybe Ajayi group has connection to whoever behind Aldaniti or maybe Aldaniti is actually a part of Ajayi group.
