Musk’s DOGE Goon ‘Big Balls’ Helped Gang That Abused FBI Agent
“They’re not a pleasant group,” the anonymous former intel agent said.

Reddit/Getty Images
A company linked to notorious Department of Government Efficiency goon ‘Big Balls’ was used by a cybercrime ring who allegedly abused an FBI agent, according to Reuters.
When still a high school student in 2022, the most high profile Elon Musk staffer—real name Edward Coristine—started to run a company called DiamondCDN. The company offered network services and was used by a cybercriminal collective called “EGodly,” Reuters stated.

Elon Musk's protégé allegedly provided tech support for a dodgy collective.
JIM WATSON/AFP via Getty Images
The group thanked the 19-year-old’s company for its services in a Telegram post in Feb. 2023, writing: “We extend our gratitude to our valued partners DiamondCDN for generously providing us with their amazing DDoS protection and caching systems, which allow us to securely host and safeguard our website.”
The group has a nefarious past, Reuters reported. In 2023, a now inactive Telegram channel linked to the group, boasted about taking over phone numbers and hacking into email accounts linked to law enforcement in Latin America and Europe. The message also mentioned the theft of cryptocurrency. None of the claims have been verified.
ADVERTISEMENT
EGodly also reportedly targeted an FBI agent they claimed was investigating the group. They doxxed his home address and even shared photos of his house. The group also plastered his personal details on Telegram and shared his phone number publicly, Reuters reported.
Sign Up for The Swamp Newsletter
By clicking “SUBSCRIBE” you agree to our Terms of Use and Privacy Policy.
The report stated that the group also posted a video of individuals in a car, driving past the agent’s home in Wilmington, Delaware, shouting: “EGodly says you’re a b---h!”
It also shared evidence of an obscene prank phone call to the now-retired agent, who told Reuters that they are “bad folks” who came to the agency’s attention for their alleged connection to incidents of swatting. That is the act of knowingly sending law enforcement to an address when there is no crime or emergency.
“They’re not a pleasant group,” the anonymous former intel agent said, demurring to go into any detail about the alleged harassment he faced, or whether the group was still under investigation.
Another victim said the group was composed of hardened fraudsters, according to Reuters.
Reuters said it was unable to determine whether EGodly paid Coristine’s company for its services.
Reuters reported that, between Oct. 2022 and June 2023, DiamondCDN and other entities owned by Edward Coristine, the youngest of Elon Musk’s DOGE whiz kids, were linked to EGodly website, dataleak.fun.
✌🏻
— Dataleak.fun (@CelsusDB) April 4, 2023
The site also reported that during this period, users who tried to access dataleak.fun would see a DiamondCDN “Security check.”
The site is now offline and the last message on a Twitter (now X) account that appears to be linked to the site came in April 2023. The post was the victory hand emoji, which could also be taken as the peace sign. The Telegram channel has been inactive for around a year.
Deputy director of CISA under Joe Biden, Nitin Natarajan, said a potential link between ‘Big Balls’ and EGodly is “concerning,” especially considering the timeframe being so recent.
Coristine, meanwhile, was previously fired from an internship after he allegedly leaked a data security firm’s sensitive information to its competitor, a Bloomberg report revealed in Feb. The incident didn’t prevent the teen, who counts Elon Musk as an “idol,” from landing an internship at his company, Neuralink, before moving on to DOGE.
Register below to read this article for free or subscribe
to unlock unlimited access to The Daily Beast.
Monthly
$1
First month then $5.99/month
Annual
$35
First year then $59.99/year
Premium
$79
First year then $119.99/year
*Substack access provided by the next business day, using your subscription email. Choosing the Premium plan constitutes your permission to share your subscription email with Substack and your agreement to Substack’s Privacy Policy.
Already have an account? Sign In
Looks like you already have a subscription!
- Account (completed)
- Payment (completed)
- Confirmation (completed)
You're all set!
Thanks for subscribing.
- 1Account
- 2Payment
- 3Confirmation

