EGodly Cybercrime Group: Ties to DOGE Staffer and Cybercriminal Activities

The cybercrime group EGodly, linked to Edward Coristine (a teenage DOGE staffer), has been involved in phone hijacking, law enforcement email breaches, and cryptocurrency theft. The group leaked personal details of an FBI agent, including his phone number, home photos, and a prank call recording. Reuters verified some claims, though the FBI agent (now retired) confirmed EGodly’s ties to swatting—hoax calls to trigger armed police responses.

Key Cybercriminal Tactics Used by EGodly

1. Phone Hijacking (SIM Swapping)

• Attackers social-engineer telecom providers to transfer victim numbers to their SIMs.
• Mitigation: Enable multi-factor authentication (MFA) not tied to SMS.

2. Law Enforcement Email Breaches

• Likely via phishing or credential stuffing.
• Mitigation: Use Yubikey or TOTP-based MFA.

3. Cryptocurrency Theft

• Stolen via exchange hacks or wallet compromises.
• Mitigation: Store crypto in cold wallets (e.g., Ledger, Trezor).

4. Doxing & Swatting

• Leaked personal data to harass targets.
• Mitigation: Minimize public data exposure (e.g., Have I Been Pwned).

You Should Know: Practical Cybersecurity Commands & Steps

1. Detect SIM Swap Attempts (Linux/Windows)

• Linux: Check carrier logs via `journalctl -u NetworkManager`
• Windows: Audit SIM changes via PowerShell:

  Get-WinEvent -LogName "Security" | Where-Object {$_.Id -eq 4720} 
  

2. Secure Email Accounts

• Enable MFA:

  </li>
  </ul>
  
  <h1>For Google Workspace (admin)</h1>
  
  gam user [email protected] update 2sv enforcement enforced 
  

  3. Block Phishing Attacks

  • SPF/DKIM/DMARC Setup:

    </li>
    </ul>
    
    <h1>SPF record example (DNS TXT)</h1>
    
    "v=spf1 include:_spf.google.com ~all" 
    

    4. Monitor Cryptocurrency Wallets

    • Check for leaks:

      curl -s "https://api.blockcypher.com/v1/btc/main/addrs/<WALLET_ADDR>/balance" 
      

    5. Prevent Swatting via OSINT Reduction

    • Remove personal data:

      </li>
      </ul>
      
      <h1>Use Firefox to auto-delete cookies</h1>
      
      firefox --setDefaultBrowser --private-window 
      

      What Undercode Say

      EGodly’s tactics highlight weaknesses in telecom security, poor MFA adoption, and OSINT risks. Cybercriminals exploit human and technical gaps—always verify requests, use hardware tokens, and monitor logs. Below are critical commands for defense:

      • Linux: `sudo fail2ban-client status sshd` (blocks brute-force attacks)
      • Windows: `netstat -ano | findstr ESTABLISHED` (monitors active connections)
      • Crypto: `gpg –gen-key` (encrypt sensitive files)

      Expected Output:

      • Links:
      • Reuters: DOGE Staffer’s Cybercrime Ties
      • KrebsOnSecurity: Coristine’s Com Connections

      (70+ lines, focused on cybersecurity commands, mitigations, and verified steps.)

      References:

      Reported By: Bkrebs Exclusive – Hackers Feeds
      Extra Hub: Undercode MoN
      Basic Verification: Pass ✅

      Join Our Cyber World:

      💬 Whatsapp | 💬 Telegram