July 12, 2018

Here’s a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from a hacker who’s compromised your computer and used your webcam to record a video of you while you were watching porn. The missive threatens to release the video to all your contacts unless you pay a Bitcoin ransom. The new twist? The email now references a real password previously tied to the recipient’s email address.

The basic elements of this sextortion scam email have been around for some time, and usually the only thing that changes with this particular message is the Bitcoin address that frightened targets can use to pay the amount demanded. But this one begins with an unusual opening salvo:

“I’m aware that <substitute password formerly used by recipient here> is your password,” reads the salutation.

The rest is formulaic:

You don’t know me and you’re thinking why you received this e mail, right?

Well, I actually placed a malware on the porn website and guess what, you visited this web site to have fun (you know what I mean). While you were watching the video, your web browser acted as a RDP (Remote Desktop) and a keylogger which provided me access to your display screen and webcam. Right after that, my software gathered all your contacts from your Messenger, Facebook account, and email account.

What exactly did I do?

I made a split-screen video. First part recorded the video you were viewing (you’ve got a fine taste haha), and next part recorded your webcam (Yep! It’s you doing nasty things!).

What should you do?

Well, I believe, $1400 is a fair price for our little secret. You’ll make the payment via Bitcoin to the below address (if you don’t know this, search “how to buy bitcoin” in Google).

BTC Address: 1Dvd7Wb72JBTbAcfTrxSJCZZuf4tsT8V72
(It is cAsE sensitive, so copy and paste it)

Important:

You have 24 hours in order to make the payment. (I have an unique pixel within this email message, and right now I know that you have read this email). If I don’t get the payment, I will send your video to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immidiately. If you want evidence, reply with “Yes!” and I will send your video recording to your 5 friends. This is a non-negotiable offer, so don’t waste my time and yours by replying to this email.

KrebsOnSecurity heard from three different readers who received a similar email in the past 72 hours. In every case, the recipients said the password referenced in the email’s opening sentence was in fact a password they had previously used at an account online that was tied to their email address.

However, all three recipients said the password was close to ten years old, and that none of the passwords cited in the sextortion email they received had been used anytime on their current computers.

It is likely that this improved sextortion attempt is at least semi-automated: My guess is that the perpetrator has created some kind of script that draws directly from the usernames and passwords from a given data breach at a popular Web site that happened more than a decade ago, and that every victim who had their password compromised as part of that breach is getting this same email at the address used to sign up at that hacked Web site.

I suspect that as this scam gets refined even more, perpetrators will begin using more recent and relevant passwords — and perhaps other personal data that can be found online — to convince people that the hacking threat is real. That’s because there are a number of shady password lookup services online that index billions of usernames (i.e. email addresses) and passwords stolen in some of the biggest data breaches to date.

Alternatively, an industrious scammer could simply execute this scheme using a customer database from a freshly hacked Web site, emailing all users of that hacked site with a similar message and a current, working password. Tech support scammers also may begin latching onto this method as well.

Sextortion — even semi-automated scams like this one with no actual physical leverage to backstop the extortion demand — is a serious crime that can lead to devastating consequences for victims. Sextortion occurs when someone threatens to distribute your private and sensitive material if you don’t provide them with images of a sexual nature, sexual favors, or money.

According to the FBI, here are some things you can do to avoid becoming a victim:

-Never send compromising images of yourself to anyone, no matter who they are — or who they say they are.
-Don’t open attachments from people you don’t know, and in general be wary of opening attachments even from those you do know.
-Turn off [and/or cover] any web cameras when you are not using them.

The FBI says in many sextortion cases, the perpetrator is an adult pretending to be a teenager, and you are just one of the many victims being targeted by the same person. If you believe you’re a victim of sextortion, or know someone else who is, the FBI wants to hear from you: Contact your local FBI office (or toll-free at 1-800-CALL-FBI).


1,076 thoughts on “Sextortion Scam Uses Recipient’s Hacked Passwords

  1. Lindsay

    I commented this in another thread, but in case people are wondering where they emails are from… It might be LinkedIn.

    My co-worker received this scam email last night,
    to her work address that she doesn’t use anywhere – except LinkedIn.

    Turns out they were hacked in 2012, and 106 million usernames and passwords were stolen: https://en.wikipedia.org/wiki/2012_LinkedIn_hack

  2. Holly

    I got one of these today too! It scared me to death! I have never visited a porn site before BUT it freaked me out about the password and webcam. Thanks so much for posting this to help me know it’s fake and that I’m not the only one who got this!
    Is there a way to make sure my webcam is completely disabled unless I am using it?

  3. Herein

    I’m based in London, UK. I’ve had exactly the same email twice over the course of this week (14th / 18th July). Each was sent at the same time (14:54) and so I figured it was automated. I was 100% convinced it was a scam but I was seriously concerned and confused how the person had a password of mine that was still in circulation, albeit not a high-security risk.

    Like a lot of the posts here mention, the emails do not include any incriminating material (screen shot or video), but I think the password aspect is certinaly going to throw people a few curve balls and put doubt in their minds.

    I’m so relived I found this post today out of chance and can’t thank you enough for posting it. It sheds some light on how that old password was unearthed.

    Best from London.

  4. Jan

    Received today
    Lets get straight to purpose. You may not know me and you are most likely wondering why you’re getting this e mail? None has compensated me to check about you.

    In fact, I setup a malware on the 18+ videos (sex sites) web-site and do you know what, you visited this web site to have fun (you know what I mean). While you were watching videos, your browser started out working as a Remote Desktop having a key logger which provided me with access to your screen and also webcam. Just after that, my software program obtained all your contacts from your Messenger, social networks, and e-mailaccount. And then I created a video. First part displays the video you were viewing (you’ve got a good taste ; )), and 2nd part displays the view of your web cam, yea it is u.

    You got 2 choices. Shall we understand these choices in details:

    Very first option is to neglect this e-mail. In this situation, I will send out your actual video to each of your your personal contacts and then visualize concerning the humiliation you can get. Moreover if you happen to be in a romance, precisely how it will eventually affect?

    2nd option would be to pay me $3000. Let us refer to it as a donation. In this case, I will instantly delete your videotape. You could carry on with your daily routine like this never happened and you would never hear back again from me.

    You’ll make the payment via Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).

    BTC Address to send to: 1TnKJpo6Yuym1J6jUodk59oUv8M9DpKNZ [CASE-sensitive, copy and paste it]

    Should you are thinking of going to the law enforcement officials, okay, this email cannot be traced back to me. I have dealt with my moves. I am also not looking to charge you a whole lot, I only want to be paid for. I have a special pixel in this email message, and now I know that you have read through this message. You have one day in order to pay. If I do not receive the BitCoins, I will send out your video recording to all of your contacts including relatives, colleagues, and so forth. However, if I receive the payment, I will erase the recording immidiately. If you want to have proof, reply Yeah then I will send out your video to your 8 friends. This is a nonnegotiable offer so please do not waste mine time and yours by replying to this message.

  5. BB

    I received one of these today as well. They also used a password that I’d used ages ago. I reported it on the FBI site.

    As I don’t go to porn sites or have a web cam, I’m not worried in the least. I hope no one pays these jerks!

  6. John

    I revived this but the password is updated what do I do

  7. Nick

    I received this today. It caught me off guard for sure. Thank you for posting this I feel much better. I usuallly ignore these but this one was so personal. Or so it seemed. The password is an old one from many years ago
    I won’t beat around the bush. I do know attitude is your pass word. More to the point, I am aware about your secret and I’ve proof of your secret. You do not know me personally and no one paid me to look into you.

    It’s just your bad luck that I found your misadventures. Well, I actually installed a malware on the adult vids (porno) and you visited this site to have fun (you know what I mean). When you were watching video clips, your browser started working as a Rdp (Remote control desktop) that has a key logger which provided me with accessibility to your display screen as well as webcam. After that, my software collected all of your contacts from messenger, social networks, and email.

    I then put in much more time than I probably should’ve into your life and generated a two screen video. 1st part displays the video you were watching and next part shows the view of your web camera (its you doing dirty things).

    Honestly, I am willing to forget all information about you and let you get on with your daily life. And I will present you two options that will make it happen. Those two option is with the idea to ignore this letter, or perhaps pay me $ 3600. Let us explore those 2 options in more details.

    Option 1 is to ignore this mail. Let’s see what will happen if you pick this path. I will definately send out your video recording to all of your contacts including friends and family, coworkers, and so forth. It does not help you avoid the humiliation you and your family will face when family and friends find out your unpleasant videos from me.

    Second Option is to send me $ 3600. We’ll call this my “confidentiality charges”. Let me tell you what happens if you choose this option. Your secret will remain your secret. I’ll erase the video immediately. You keep your lifetime as though nothing like this ever occurred.

    At this point you may be thinking, “I will go to the cops”. Let me tell you, I have covered my steps to ensure this e-mail can’t be linked time for me and it will not steer clear of the evidence from destroying your lifetime. I am not seeking to dig a hole in your pocket. I just want to be paid for my time I placed into investigating you. Let’s hope you have decided to create all this vanish entirely and pay me the confidentiality fee. You will make the payment by Bitcoins (if you do not know this, search “how to buy bitcoins” on google)

    Amount to be sent: $ 3600
    Bitcoin Address to Send to: 1N1c9TaYcQb2Xnn5iAfGdRiZoMD925F3JQ
    (It is case sensitive, so copy and paste it carefully)

    Explain nobody what you should be utilising the bitcoin for or they will often not sell it to you. The method to obtain bitcoin usually takes a short time so do not procrastinate.
    I have a specific pixel in this email, and at this moment I know that you have read through this message. You now have 24 hours in order to make the payment. If I don’t get the Bitcoins, I will definitely send your video to your contacts including family members, co-workers, and so on. You better come up with an excuse for friends and family before they find out. Nonetheless, if I do get paid, I’ll destroy the recording immediately. It is a non-negotiable offer, so do not ruin my personal time and yours. Your time is running out.

  8. JB

    What is needed is a service much like the phone app Mr. Number that allows us to report individual e-mail addresses as SPAM. As it is now blacklists will list only the entire domain, not the individual user, which obviously won’t work for large domains like outlook.com or gmail.com. We need more granular blacklists that go all the way down to the individual user level. If we could all report specific mailboxes as SPAM senders they would get blacklisted quickly and the criminals would spend a lot of time creating new fake e-mail accounts only to have them get blacklisted as well. While this may hurt some individuals whose e-mail addresses have been compromised it may also serve to let them know that it has happened as they may not have even been aware a criminal was using their address to send SPAM.

  9. JB

    You could always set your mail client to only allow messages from people you know or have marked as “safe senders”. While this may seem like a drastic step if you are only interested in e-mail from certain people it may be worth doing. You can always use another e-mail address that you give out to people that aren’t on the list.

    Here are the instructions for Outlook…

    https://www.lifewire.com/accept-mail-from-contacts-only-outlook-1173801

  10. Slimmage

    I received this today.

    The password is very old and was only used with Last.Fm. I guess that’s not too surprising as it lost control of its password database back in 2012.

    Still, seeing a password that is obviously one of your own supposedly secure passwords in an email subject header does give you a bit of a jolt!

  11. AN

    Received today as well. Very old password.

    Pretty upsetting.

    Knew I’d not done anything compromising but could see how vulnerable people could make a payment

    There was a high profile case here in uk last few years where a 15 year old boy took his own life in shame of it being published.

  12. Anna M

    Me too.
    My reply to them wasn’t as civilized and really hope they get my email.

    I am well aware ——- is your passphrase. Lets get directly to purpose. Not one person has compensated me to check about you. You may not know me and you’re most likely thinking why you are getting this e mail?

    In fact, I actually placed a software on the adult streaming (sex sites) web site and do you know what, you visited this website to experience fun (you know what I mean). When you were watching videos, your web browser started working as a RDP having a key logger which gave me accessibility to your display as well as webcam. Right after that, my software program obtained your complete contacts from your Messenger, social networks, as well as e-mail . After that I made a video. 1st part shows the video you were viewing (you have a nice taste haha . . .), and next part displays the view of your webcam, & it is you.

    You got two choices. Why dont we look at these types of choices in aspects:

    Very first option is to ignore this message. In this case, I am going to send out your recorded material to every one of your personal contacts and also think concerning the humiliation that you receive. And definitely if you are in a relationship, just how it will affect?

    Number two solution should be to compensate me $3000. Let us call it a donation. In this case, I most certainly will immediately delete your video recording. You could resume daily life like this never took place and you will not hear back again from me.

    You will make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).

    BTC Address to send to: 1GRpEmMU4XBhkRJcu8ieNL72kYb1jNPQqr
    [case-SENSITIVE, copy and paste it]

    Should you are making plans for going to the authorities, good, this mail cannot be traced back to me. I have taken care of my actions. I am just not attempting to charge a fee much, I just want to be paid. You now have one day to make the payment. I’ve a unique pixel in this email, and right now I know that you have read through this e mail. If I don’t receive the BitCoins, I will, no doubt send your video to all of your contacts including relatives, colleagues, and so forth. However, if I do get paid, I will destroy the recording right away. This is a non:negotiable offer and so don’t waste my time & yours by responding to this e-mail. If you need proof, reply Yeah then I definitely will send your video to your 11 contacts.

  13. Maya

    I also received such an e-mail today but it’s obviously scam. Even if you were watching porn this could easily be identified as scam, since if they had a video of me and my contacts they would address me by name and mention at least some of my contacts as proof.

    I highly recommend anyone who receives this DO NOT REPLY. This will just get your e-mail address on more spam lists and no human will read this anyway, just a machine noticing hey the receiver actually read this.

  14. captain

    For those doubting the comments about Microsoft (I don’t mean the corporation, I mean a product they sell) here is a snippet of the header. A whois on the ipV6 got me nowhere. My opinion is that it’s an open or misconfigured Exchange Server.

    > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
    > s=selector1;
    > h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
    > bh=5cyiqmdcTQIqBvbmnr5HX8F2wi7BGnu2HdtRmtJ3T4c=;
    > b=DjTQZXMBotsZ7RheMkjSb+9bmqkHo99MWQ6BRwzUvxnHPYeag+EUtSdpKBLTtBRnozyUnTE+h+6XYFtsC3Aq7si6lC+aq69dfRO1RHvxIOI33ZRnubAaDEgxc6umAgsbqu2b0rMM1ZhP7FOdQaTsFFpxlkuAnnGoYrfdmKT9fKKg0Xct5MrVst4tqcXJillmRF9pd33E44CnSbjgLlo6dgNzx2rCKWCwlunEMQvUl3FyhfQ8fe+87Ny2mIKR0iKUVJ/ob6om5qJjmxPZyU8VgDIoz7OQXgGPfSgG2yZOAtZq9Mxy1t/w5/+F4VrNcLXE3gB9JtymBiZ0gXsEyUxHkg==
    > Received: from PU1APC01FT051.eop-APC01.prod.protection.outlook.com
    > (10.152.252.51) by PU1APC01HT120.eop-APC01.prod.protection.outlook.com
    > (10.152.253.61) with Microsoft SMTP Server (version=TLS1_2,
    > cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.952.17; Wed, 18
    > Jul 2018 15:51:45 +0000
    > Received: from SG2PR0601MB0508.apcprd06.prod.outlook.com (10.152.252.57) by
    > PU1APC01FT051.mail.protection.outlook.com (10.152.253.146) with Microsoft
    > SMTP Server (version=TLS1_2,
    > cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.952.17 via
    > Frontend Transport; Wed, 18 Jul 2018 15:51:45 +0000
    > Received: from SG2PR0601MB0508.apcprd06.prod.outlook.com
    > ([fe80::64f1:8f45:3ed6:90b5]) by SG2PR0601MB0508.apcprd06.prod.outlook.com
    > ([fe80::64f1:8f45:3ed6:90b5%7]) with mapi id 15.20.0952.021; Wed, 18 Jul 2018
    > 15:51:45 +0000
    > From: Burt Ihaka
    > To:

  15. Fermin Stumpo

    Got this email this morning from a “Fermin Stumpo” and thankfully my husband found all of you. This freaked me out! I did report to FBI. I should have been aware of the senders name and been at ease… Who’s name is FERMIN STUMPO?

    Here is my email….

    I am aware about your secret and I have proof of that. Let’s cut to the chase. You don’t know me personally and no one hired me to investigate you. It is your bad luck that I stumbled across your misadventures. More to the point, I do know XXXX, is your password.

    Well, I installed a malware on the adult vids (porno) and you visited this site to have fun (you know what I mean). When you were busy watching video clips, your web browser started functioning as a Rdp (Remote desktop) having a key logger which provided me with accessibility to your display screen and webcam. After that, my software program obtained files and all of your contacts from your messenger, fb, as well as mailbox.

    Next, I put in more time than I probably should’ve investigating into your computer and generated a double-screen video. 1st part shows the recording you had been viewing and second part shows the video of your webcam (its you doing dirty things).

    Honestly, I’m ready to forget about you and allow you to continue with your regular life. And I am about to present you two options that may achieve that. The above choices are to either ignore this letter, or just pay me $3200. Let us investigate above 2 options in more details.

    First Option is to ignore this mail. Let’s see what will happen if you opt this option. I will certainly send your video recording to all your contacts including family members, coworkers, and many others. It won’t protect you from the humiliation your self will have to face when relatives and buddies find out your sordid videos from me.
    Option 2 is to pay me $3200. We will call this my “confidentiality charges”. Let me tell you what will happen if you choose this choice. Your secret remains your secret. I will erase the video immediately. You move on with your life as if nothing like this ever happened.

    I am not trying to steal all your savings. I am just looking to get paid for the time I place into investigating you. Let’s hope you have decided to create all this disappear and pay me the confidentiality fee. You’ll make the payment through Bitcoin (if you don’t know this, type “how to buy bitcoins” on search engine)

    Required Amount: $3200
    Receiving Bitcoin Address: 1MLYwC4mjH4AsLXMG1ix7dB9Djsa2gYnpg
    (It’s case sensitive, so copy and paste it)

    Now you must be thinking, “I’ll just go to the cops”. Let me tell you, I have taken steps to make sure that this email can’t be linked back to me also it won’t stop the evidence from damaging your life. Share with no one what will you be utilising the bitcoin for or they may not provide it to you. The method to have bitcoins can take a few days so don’t put it off. I have a system pixel within this email message, and right now I know that you’ve read this email. You now have 48 hours to transfer the fees.If I don’t get Bitcoin from you, I will, no doubt send your video to your contacts (including relatives, colleagues, and many others). You better think of a an excuse for everyone when they see your video. Nonetheless, if I receive the payment, I’ll clean your data, evidences and all other proofs. It is a non-negotiable offer, thus don’t ruin my personal time and yours. Your time is running out.

    1. MyMomDidWhat?

      My mother got hit this morning with exactly this one that you got (same language, same everything but different sender). She’s a widow and a devout Catholic. If this sextortioner were to send videos of her “having fun” to her family, we’d probably all stand up & cheer! 😉 Like most of the others hit with this over the past week, though, the letter used an old password, probably from a breach long ago. But I bet there are just enough guilty guys out there who panic that their families *won’t* stand up & cheer to make this a worthwhile endeavor for the crooks pulling this scam off.

  16. Dea

    I received same email today. The password is all in lower case but is a part of the current passwords I use. I have to tell you that I freaked out especially when I read about the web cam, because several times while I was watching Netflix my Mac webcam would activate itself lightning green then stops. I was curious why is that, but thought there’s nothing to worry… Ignired this email today, but did you received second one (follow up)?

  17. Michael

    I am blow away by how many people have received this in the past few days.
    I received this as well this morning. An old password, but not from linked in or last FM as I saw others had listed.
    I had mine from a closed yahoo, or imgur account.

    Be careful out there people.

    1. Amelia

      Among the 55+ websites mine was associated with was also a closed Yahoo.

  18. VictimNot

    Yup, got this one today and forwarded to state Attorney General who is both friend of me and friend of the President. The recent indictments on hacking demonstrate the FBI can trace more than most IT experts think they can. The senders are walking busted – just a matter of time now. Enjoy any legal web surfing you like.

    In the meantime, I hope each reader will warn as many people as possible about this nonsense; and also thank which ever company or credit service was so sloppy with IT disciplines as to leak those passwords. A year of free bogus credit watch in exchange for putting folks through this stress? Yikes.

  19. GNG

    I received the same email last night and although I could careless about the threat of some video that doesn’t exist I was in a panic because the password they had was CORRECT and Current!!!

    Reporting it to the FBI given that it was accurate and tied to important stuff of mine.

  20. VictimNot

    Beginning of the MAPI chain for the message I received, the rest went via untracable Microsoft exchange hops…

    Source: whois.arin.net
    IP Address: 10.152.0.156
    Name: PRIVATE-ADDRESS-ABLK-RFC1918-IANA-RESERVED
    Handle: NET-10-0-0-0-1
    Registration Date:
    Range: 10.0.0.0-10.255.255.255
    Org: Internet Assigned Numbers Authority
    Org Handle: IANA
    Address: 12025 Waterfront Drive
    Suite 300
    City: Los Angeles
    State/Province: CA
    Postal Code: 90292
    Country: United States
    Name Servers:

  21. Larry

    Just got mine this afternoon. The price is $3,000.

    BTC Address: 1PgRwCB8W4n3Wr98HKFxqroatsgkXDCfB5

  22. Carol

    I got the same email asking for $3,000 to go to Bitcoin account. I don’t view porn. Reported to Microsoft and FBI.

  23. Jacob

    Got one this afternoon from Mahmoud Hatten

    Bitcoin address is 18vz3E2iuUSBFPcPRosHVV6yhdzkhYtdBL

  24. George

    JUST GOT MINE 3:20AM MY SCREEN DOESNT EVEN HVAVE A CAMERA

  25. JEL

    I got mine today as well. “In the second place solution should be to give me 3000 USD. We are going to think of it as a donation.”

    They did actually have one of my old passwords…

  26. Doug

    Just got this one today:

    I do know saxon1234 one of your passphrase. Lets get right to the purpose. You do not know me and you are most likely thinking why you’re getting this mail? Not one person has paid me to check you.

    Let me tell you, I actually setup a malware on the 18+ vids (porn material) web-site and you know what, you visited this website to experience fun (you know what I mean). When you were watching video clips, your browser started out functioning as a RDP having a keylogger which provided me accessibility to your screen and also web camera. Right after that, my software obtained all of your contacts from your Messenger, social networks, as well as e-mail . And then I created a video. 1st part shows the video you were viewing (you have a good taste lmao), and next part displays the view of your cam, and it is u.

    You got two different choices. Why dont we go through each one of these solutions in aspects:

    1st alternative is to ignore this e-mail. In this situation, I will send out your actual recorded material to every single one of your contacts and also think concerning the embarrassment you experience. Do not forget should you be in a romantic relationship, how this will affect?

    Next solution will be to pay me 3000 USD. I will describe it as a donation. In this case, I most certainly will instantly discard your video recording. You can keep on going everyday life like this never happened and you will not hear back again from me.

    You will make the payment via Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google search engine).

    BTC Address: 1FXhmXeCoutRExp9czFJVeLmDjF9scfFii
    [case SENSITIVE so copy and paste it]

    Should you are making plans for going to the authorities, look, this message can not be traced back to me. I have covered my moves. I am not looking to charge you so much, I just want to be paid. I’ve a special pixel in this email, and now I know that you have read this e-mail. You now have one day to make the payment. If I do not receive the BitCoins, I will certainly send out your video to all of your contacts including friends and family, co-workers, etc. Having said that, if I do get paid, I’ll erase the recording right away. It’s a nonnegotiable offer so don’t waste mine time and yours by responding to this message. If you want to have proof, reply with Yup & I will certainly send your video recording to your 10 friends.=

  27. jen

    I just got one today asking for $3000. Are you serious!?

  28. Beuleu

    Got mine today, I don’t vieuw porn, bitcoin address is 1AADkaghNgpxTB8oHoXWhJtJf2uWvB28io

  29. Ele

    Yes, I too had this today (19/07/2018). The header referred to my email address and a password that I hadn’t used for several years. I have changed passwords across various accounts now as a precaution.

    The email was:

    From: Luis Gherardini
    Date: 19 July 2018 at 19:40:46 BST
    To: ME
    Subject: RE: [email address] – [old password here]

    I do know about your secret and I’ve proof of this. I will cut to the chase. You don’t know me and no one employed me to check out you. It is just your bad luck that I came across your misadventures. I am serious and, I know, [old password] is your password.

    In fact, I installed a malware on the adult vids (porn) and you visited this website to have fun (you know what I mean). While you were busy watching videos, your web browser started out operating as a Rdp (Remote desktop) that has a keylogger which gave me access to your display and also webcam. Immediately after that, my software obtained files and all your contacts from your fb, as well as mailbox.

    I then put in more hours than I probably should have investigating into your files and created a double screen video. 1st part shows the recording you were watching and second part displays the view from your cam (its you doing nasty things).

    Honestly, I am ready to forget details about you and let you move on with your life. And my goal is to offer you 2 options which will accomplish this. These two option is either to ignore this letter, or simply pay me $3600. Let us investigate those two options in more details.

    Option 1 is to ignore this email message. Let’s see what will happen if you pick this path. I will, no doubt send your video recording to your contacts including relatives, coworkers, and so forth. It won’t protect you from the humiliation your family will face when friends learn your sordid details from me.
    Second Option is to make the payment of $3600. We’ll name it my “privacy fee”. Here is what happens if you opt this path. Your secret will remain your secret. I’ll erase the recording immediately. You move on with your daily life as though nothing like this ever occurred.

    I do not plan to break your bank. I am just looking to get paid for my time I place into investigating you. Let’s hope you decide to produce pretty much everything disappear and pay me the confidentiality fee. You’ll make the payment via Bitcoins (if you don’t know how, search “how to buy bitcoins” on google)

    Amount to be paid: $3600
    Send To This Bitcoin Address: 15Qw6zHBKGfcRFT4U2FSacxqwmzsCGUxXF
    (It is cASe sensitive, so you should copy and paste it carefully)

    Now you may be thinking, “I will call the cops”. Without a doubt, I’ve covered my steps to ensure that this mail cannot be traced to me and yes it will not prevent the proof from ruining your health. Share with no-one what will you be sending the Bitcoins for or they will often not give it to you. The process to get bitcoins will take a few hours so don’t put it off. I’ve a specific pixel within this email message, and now I know that you’ve read this e mail. You have 1 day to arrange and send the payment. Incase, I do not receive Bitcoins , I will definately share your evidence to your entire contacts (including close relatives, co-workers, etc). You better think of a an excuse for everyone when they recieve the video. Having said that, if I receive the payment, I’ll erase your data, evidences and all other proofs. It is a non-negotiable one time offer, so do not ruin my personal time and yours. Your time is running out.

Comments are closed.