Two men found guilty of £1m “boiler room” scam