Here’s a clever new twist on an old email scam that could serve to make the con far more believable. The message purports to have been sent from a hacker who’s compromised your computer and used your webcam to record a video of you while you were watching porn. The missive threatens to release the video to all your contacts unless you pay a Bitcoin ransom. The new twist? The email now references a real password previously tied to the recipient’s email address.
The basic elements of this sextortion scam email have been around for some time, and usually the only thing that changes with this particular message is the Bitcoin address that frightened targets can use to pay the amount demanded. But this one begins with an unusual opening salvo:
“I’m aware that <substitute password formerly used by recipient here> is your password,” reads the salutation.
The rest is formulaic:
You don’t know me and you’re thinking why you received this e mail, right?
Well, I actually placed a malware on the porn website and guess what, you visited this web site to have fun (you know what I mean). While you were watching the video, your web browser acted as a RDP (Remote Desktop) and a keylogger which provided me access to your display screen and webcam. Right after that, my software gathered all your contacts from your Messenger, Facebook account, and email account.
What exactly did I do?
I made a split-screen video. First part recorded the video you were viewing (you’ve got a fine taste haha), and next part recorded your webcam (Yep! It’s you doing nasty things!).
What should you do?
Well, I believe, $1400 is a fair price for our little secret. You’ll make the payment via Bitcoin to the below address (if you don’t know this, search “how to buy bitcoin” in Google).
BTC Address: 1Dvd7Wb72JBTbAcfTrxSJCZZuf4tsT
8V72
(It is cAsE sensitive, so copy and paste it)Important:
You have 24 hours in order to make the payment. (I have an unique pixel within this email message, and right now I know that you have read this email). If I don’t get the payment, I will send your video to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immidiately. If you want evidence, reply with “Yes!” and I will send your video recording to your 5 friends. This is a non-negotiable offer, so don’t waste my time and yours by replying to this email.
KrebsOnSecurity heard from three different readers who received a similar email in the past 72 hours. In every case, the recipients said the password referenced in the email’s opening sentence was in fact a password they had previously used at an account online that was tied to their email address.
However, all three recipients said the password was close to ten years old, and that none of the passwords cited in the sextortion email they received had been used anytime on their current computers.
It is likely that this improved sextortion attempt is at least semi-automated: My guess is that the perpetrator has created some kind of script that draws directly from the usernames and passwords from a given data breach at a popular Web site that happened more than a decade ago, and that every victim who had their password compromised as part of that breach is getting this same email at the address used to sign up at that hacked Web site.
I suspect that as this scam gets refined even more, perpetrators will begin using more recent and relevant passwords — and perhaps other personal data that can be found online — to convince people that the hacking threat is real. That’s because there are a number of shady password lookup services online that index billions of usernames (i.e. email addresses) and passwords stolen in some of the biggest data breaches to date.
Alternatively, an industrious scammer could simply execute this scheme using a customer database from a freshly hacked Web site, emailing all users of that hacked site with a similar message and a current, working password. Tech support scammers also may begin latching onto this method as well.
Sextortion — even semi-automated scams like this one with no actual physical leverage to backstop the extortion demand — is a serious crime that can lead to devastating consequences for victims. Sextortion occurs when someone threatens to distribute your private and sensitive material if you don’t provide them with images of a sexual nature, sexual favors, or money.
According to the FBI, here are some things you can do to avoid becoming a victim:
-Never send compromising images of yourself to anyone, no matter who they are — or who they say they are.
-Don’t open attachments from people you don’t know, and in general be wary of opening attachments even from those you do know.
-Turn off [and/or cover] any web cameras when you are not using them.
The FBI says in many sextortion cases, the perpetrator is an adult pretending to be a teenager, and you are just one of the many victims being targeted by the same person. If you believe you’re a victim of sextortion, or know someone else who is, the FBI wants to hear from you: Contact your local FBI office (or toll-free at 1-800-CALL-FBI).
I received the following e-mail this morning, sounding very similar to others already reported. The password is old and I don’t use it any longer, but probably not as old as 10 years. In any case, what was interested is that when I highlighted the text to copy and paste it here, all sorts of names showed up in a haphazard list (I placed them in parentheses all can see them), in between each paragraph. Not sure if that is an artifact of the script they are using or not.
From: Elsy Boscagli [mailto:srllewellynjci@outlook.com]
Sent: Wednesday, July 18, 2018 12:41 PM
To: ron@ferraro.us
Subject: Re ron – xxxxxxx?
I am aware xxxxxxx is your pass. Lets get right to point. No one has compensated me to investigate you. You may not know me and you’re probably thinking why you are getting this e-mail?
(Theresa Connie Dan Steve Raymond Byron Erick Tony Joseph Brandon)
actually, I actually setup a software on the 18+ videos (porn material) website and you know what, you visited this website to have fun (you know what I mean). When you were watching video clips, your browser began operating as a RDP having a keylogger which provided me accessibility to your display screen and webcam. Right after that, my software program collected every one of your contacts from your Messenger, social networks, as well as e-mailaccount. And then I made a double video. First part displays the video you were watching (you’ve got a nice taste lmao), and 2nd part displays the view of your web camera, and it is u.
(Susan Javier Stephanie Luann Rosa Logan Cimarron Joe Joni Marshall)
You have two different solutions. Shall we study the solutions in particulars:
(Ryan Kari Emmanuel Aimee Georgehenrie Brett Kelsey Ray Marisa Marlen)
1st choice is to skip this e-mail. In this situation, I will send out your video to each one of your personal contacts and also visualize about the embarrassment you can get. Do not forget if you are in a committed relationship, how it is going to affect?
(Benard Crystal Alejandra Briana Michael Elbert Robert Andrew Scott Sultan)
Latter solution should be to compensate me $3000. We will refer to it as a donation. Consequently, I will asap remove your video recording. You could go on with your daily routine like this never took place and you will not hear back again from me.
(Jared Ryan Kevin Vinnie Justin Brent Rod Christopher Anna)
You’ll make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).
(Hector Gma Tamara Kiah Noe Rita Coonie Chris Jeremy Idy)
BTC Address: 1CyQcBhVeuiYFhCUxKCKpx9tNcLvtVvgnX
(Austin Ellen Andrew Sean Sirlange Mary Amaury Robert Lawonda Gloria)
[case-SENSITIVE, copy and paste it]
(Michelle Eduardo Brooke Kima Joseph Richard Amy Jean Richard Lynn)
If you are thinking of going to the police, good, this e mail can not be traced back to me. I have taken care of my moves. I am also not attempting to ask you for a whole lot, I just like to be compensated. You have one day in order to make the payment. I have a specific pixel in this e-mail, and now I know that you have read this message. If I do not receive the BitCoins, I definitely will send out your video to all of your contacts including close relatives, coworkers, and so on. Nevertheless, if I receive the payment, I will erase the video right away. This is a non-negotiable offer, and thus please do not waste my personal time & yours by replying to this mail. If you want evidence, reply Yea then I definitely will send out your video to your 5 friends.
(Axel Magdalena Tenaya Courtney Shun Janice Cheryle Alyssa Jim Crystal Zora Cynthia Sam Jeremy Anthony Merenguekong Tracey Sergio Mike Marcus Daniel Ashley Timarah Kenisha Vince James Kiara Tammy Cilianette Antoinette Marquelis Adger Chris Dedosha Rudy Edwin Robert Shane Eric Dailuz Sammy Leticia Meg Andy Lorenzo Dominique Randall Chris Sildesa Rodney Teresha Sonny Susi Lynn James Jennifer Irving Cory Mason Anthony Tabitha Crystal Raymond Antie Joel Jennifer Dustin Patricia Michel Amanda Ngoctrinh Velucia Loterte Thomas Nancy Tyler Debbie Sarah Daniel Kelly Berlin Michelle Elizabeth David Vincent Tamara Heather Linda Iris Richard)
I just got one today, said an old password that hasn’t been used for years. It was from ctbarbeeuq@outlook.com this email address so be aware it is a scam
I just got one. I told them to send me the video. Like, how stupid do they think I am?
I got one too from stjvidacm@outlook.com . PW noted was from years ago. While what was claimed wasn’t possible for several reasons, I was terrified of faked material until I saw this article. Thanks for the article.
I received the same email please report this scum trash.
They are extorting $2000
Was about to report to the FBI
Please someone forward this article to the FBI so they can compile a list email addresses, names and bitcoin links used to attack people with extortion from these comments graciously in response with these numerous complaints ignited from the article. I did however contacted Microsoft outlook they were no help. Maybe Apple? This is one of the perpetrators.
Susi Winny
qxtrezey@outlook.com
BTC Address to send to: 1NUrHh5sC4c8eHxWDXrJex6jef6wq6kmDN
Someone help end these types of scum that don’t want to do anything but evil.
Just reported to FBI. No idea if it will do anything, but at least I tried fighting back.
BTC Address: 1NUrHh5sC4c8eHxWDXrJex6jef6wq6kmDN
Received almost the same (some wording variation).
Seems to be linked to an old LinkedIn data breach…
https://krypt3ia.wordpress.com/2018/07/16/extortion-phish-your-password-is-xxxx/
Same here, but I kind of want to see my video 😛
Posted for reference & help to make others aware of this I suppose phishing scam:
Mariellen Zao
Wed 7/18/2018, 2:21 PM
You
I am well aware ****** is your passphrase. Lets get directly to the purpose. You don’t know me and you’re probably thinking why you are getting this mail? Not a single person has compensated me to investigate about you.
Well, I placed a malware on the xxx vids (pornography) web site and you know what, you visited this site to experience fun (you know what I mean). While you were watching videos, your browser started working as a Remote Desktop with a keylogger which provided me with access to your screen and webcam. Immediately after that, my software obtained your entire contacts from your Messenger, Facebook, and e-mail . And then I made a double-screen video. 1st part shows the video you were viewing (you have a good taste lmao), and second part displays the recording of your webcam, yea it is you.
You actually have two options. We are going to look at the options in particulars:
First alternative is to ignore this email. As a consequence, I most certainly will send your tape to every one of your personal contacts and thus just imagine about the awkwardness you experience. And as a consequence in case you are in an intimate relationship, how it will certainly affect?
Number two option will be to compensate me $$3000. Lets regard it as a donation. In this scenario, I will instantaneously erase your video. You will carry on your way of life like this never took place and you never will hear back again from me.
You will make the payment through Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).
BTC Address to send to: 1FV7oeZh8Q4VHe6jNZBxfzcXMioTMZcZYF
[case-sensitiveso copy & paste it]
If you are making plans for going to the cop, look, this e-mail cannot be traced back to me. I have taken care of my steps. I am also not attempting to charge a fee much, I wish to be compensated. I’ve a unique pixel within this email message, and now I know that you have read this email. You have one day to pay. If I do not get the BitCoins, I will definitely send your video recording to all of your contacts including friends and family, coworkers, and so forth. Nonetheless, if I receive the payment, I will erase the recording right away. This is the non-negotiable offer, and thus do not waste my time & yours by replying to this e-mail. If you really want evidence, reply with Yup and I definitely will send your video recording to your 14 friends.
Got it today.
Lets get directly to purpose. I know xxxxx one of your pass word. No one has paid me to check you. You don’t know me and you’re most likely wondering why you are getting this mail?
BUNCH OF NAMES OF FOLKS I DO NOT KNOW
actually, I placed a malware on the video clips (sexually graphic) site and there’s more, you visited this web site to have fun (you know what I mean). While you were viewing video clips, your browser began operating as a RDP that has a key logger which provided me with access to your display and cam. Just after that, my software program obtained all your contacts from your Messenger, Facebook, and e-mail . Next I created a video. 1st part shows the video you were viewing (you’ve got a fine taste hehe), and next part shows the recording of your webcam, yeah its you.
MORE NAMES
You have 2 alternatives. Why dont we read these solutions in particulars:
YET MORE NAMES
Very first solution is to dismiss this e mail. In this situation, I am going to send out your actual video recording to all your your personal contacts and imagine regarding the awkwardness you experience. In addition should you be in a romance, just how it is going to affect?
NAMES
Other solution is to pay me $2000. Let us name it as a donation. In this case, I most certainly will instantly remove your video. You could continue on daily life like this never took place and you will never hear back again from me.
NAMES
BTC Address: 1GXj7h2wSBNhH2WdgMLVZ9dACaUF7n2onu
NAMES
[CASE-sensitive copy and paste it]
NAMES
If you may be planning on going to the law enforcement officials, good, this e-mail cannot be traced back to me. I have covered my steps. I am not looking to ask you for a whole lot, I want to be paid for. You now have one day to pay. I have a specific pixel in this email message, and right now I know that you have read through this e-mail. If I don’t get the BitCoins, I will send out your video to all of your contacts including relatives, colleagues, and so on. Having said that, if I receive the payment, I will erase the recording right away. It’s a non-negotiable offer, therefore please don’t waste mine time & yours by replying to this e mail. If you want proof, reply with Yea & I will send out your video to your 5 contacts.
LOTS OF NAMES
Received similar letter, they used a password I used in the past for sites I don’t care about. My webcam I had made inaccessible. If you assume everything in the letter is true (if it were they would provide some of those facts) and you paid them why would you ever think they would erase anything? If they get you for $3000 then they know you are a sucker, next it will be $10,000. Nothing would be gained by paying them
Exactly. I got one earlier today…the wording was slightly different, but same context and had all the names mixed in between paragraphs (they weren’t visible in the main e-mail, only when I selected the text to paste it into another e-mail that sent to a friend who works in this business). The best thing to do right now is just make sure you aren’t using that password any longer.
What makes you think paying them will cause them to erase anything? If they had the goods on you wouldn’t they add a few choice ones in the email to prove it?
Is this real ??!! I just got it.
I got this email today and they referenced my 6 digit iPhone passcode which is not used as a password anywhere else. Is there some precaution I should take to ensure hackers aren’t getting access to other passwords/I do on my phone, like my bank info?
Need to report it to the FBI internet crime division at http://www.ic3.gov.
I received one and called them. They said to file here because this is the division that takes care of this and has caught some of them.
My wife got this today, totally freaked her out. I simply told her that unless she was on a porn site lately what is she worried about? Thanks to Brian for posting this, I read it last week and it kept me from over reacting.
It’s a shame that one must register at bitcoinwhoswho in order to report a scam. Not gonna bother to do that.
The implication is that not only that you visited a porn site, but that you used that password to log into an account on said web site. I’m sure there are plenty of people who have done that, but considering the abundance of free “content” out there, I would imagine most people who did visit one of those sites certainly did so as anonymously as possible (as in, did not set up an account and provided a password and e-mail addy). They’re banking on folks simply freaking out by seeing their e-mail address, name and an actual old password they have used attached to this….that was my first reaction, until I found Brian’s article and all of the comments from folks who received the exact same scam (only worded a little differently each time).
I just received an nearly identical threat but it was sent via USPS. No mention of passwords or porn activity, but simply said they’ve witnessed me in my hometown and have evidence of my wrong doing. The start of the letter is the same “I’m going to cut to the chase…” In this case they’re demanding $15,850 in bitcoin due within 9 days of the postmark on the letter or they will “expose” me to friends, family, and neighbors. I filed a report with ic3.gov.
I wrote about the snail mail extortion letters back in January
https://krebsonsecurity.com/2018/01/bitcoin-blackmail-by-snail-mail-preys-on-those-with-guilty-conscience/
Interesting as I really don’t care; curious about my facial expressions. I hope it was YouTube worthy… 🙂
Alden Paden
Tue 7/17/2018, 4:19 PM
It is just so unfortunate. I am aware evhou812 is your password. More to the point, I know your secret and I have proof of this. You don’t know me and nobody employed me to investigate you.
It is just your bad luck that I discovered your blunder. Well, I setup a malware on the adult video clips (porno) and you visited this site to experience fun (you know what I mean). When you were busy watching videos, your internet browser initiated functioning as a Rdp (Remote desktop) that has a keylogger which provided me accessibility to your display screen and web camera. After that, my software obtained every one of your contacts from your facebook, and e-mail.
Next, I gave in much more hours than I should’ve digging into your life and made a double-screen video. 1st part displays the recording you were viewing and other part displays the video from your web camera (its you doing dirty things).
Honestly, I am willing to forget exactly about you and allow you to move on with your daily life. And I am about to give you 2 options which will accomplish that. These two options are either to ignore this letter, or just pay me $ 3200. Let us explore those 2 options in more detail.
Option One is to ignore this email message. Let’s see what will happen if you pick this option. I will send your video to your entire contacts including family members, colleagues, and so forth. It will not shield you from the humiliation your self will feel when friends learn your unpleasant videos from me.
Other Option is to pay me $ 3200. We will call it my “confidentiality charges”. Now lets see what happens if you pick this option. Your secret will remain your secret. I’ll destroy the video immediately. You go on with your life that none of this ever happened.
At this point you may be thinking, “I will call the cops”. Let me tell you, I’ve covered my steps to ensure that this e mail cannot be tracked time for me and it will not stay away from the evidence from destroying your lifetime. I am not seeking to dig a hole in your pocket. I just want to get paid for my time I place into investigating you. Let’s assume you decide to produce all of this vanish entirely and pay me my confidentiality fee. You will make the payment via Bitcoin (if you don’t know how, search “how to buy bitcoins” on search engine)
Transfer Amount: $ 3200
Receiving Bitcoin Address: 1F8dxmQMskgBowr6AW33P3biLfvopLTmYf
(It’s CASE sensitive, so copy and paste it carefully)
Share with nobody what you should be using the bitcoin for or they possibly will not offer it to you. The process to get bitcoin will take a day or two so do not procrastinate.
I have a specific pixel in this e-mail, and right now I know that you have read through this e-mail. You now have 24 hours to make the payment. If I do not receive the Bitcoin, I will certainly send out your video to your entire contacts including relatives, colleagues, and many others. You better come up with an excuse for friends and family before they find out. Having said that, if I do get paid, I’ll destroy the proof immediately. It is a non negotiable one time offer, so please don’t ruin my personal time & yours. Time is running ou
you paid???
I got this EXACT SAME email! The words don’t change a bit, just the amount lol my person was greedy, he wanted 3900 lol
I got exactly the same meesage as yours this morning with a password I was still using for another account, so changed that sharpish…Told the wife, so now she´s filed for divorce because I didn´t watch the porn with her (only joking!!) Bstds! They know how to wind us up… Thanks for posting this… now I can go back to just worrying about everyday life… Although, I´m going to listen to my daughter in future and always keep the webcam covered when not in use from now on…My family, friends and contacts see enough of my fat face when I go visiting without having it mailed to them…I think they´d´ve paid the ransom not to have had to see it again before xmas…Cheers!
This was the one I received today. I work in a government facility and reported to our cybersecurity center. They work with the FBI and I’d love to think law enforcement will nail these creeps, but that’s probably not likely.
I can easily see how this would be *terrifying,* at first glance, for anyone who had an account on an adult site. The scammers did a great job preying on people’s fear of humiliation. Fortunately, they can’t punctuate worth a damn.
________________________________
From: Sanderson Quaye
Sent: Tuesday, July 17, 2018 6:02 PM
To:
Subject: [EXTERNAL] RE (login ID – password)
I do know one of your password. Lets get directly to point. You do not know me and you are probably thinking why you are getting this e-mail? Nobody has paid me to check you.
actually, I actually installed a malware on the xxx video clips (pornographic material) web-site and you know what, you visited this website to have fun (you know what I mean). When you were viewing video clips, your web browser began working as a Remote control Desktop with a keylogger which provided me access to your display screen as well as webcam. after that, my software collected all of your contacts from your Messenger, FB, and email . After that I created a double video. 1st part displays the video you were viewing (you have a good taste rofl), and next part shows the recording of your web camera, yeah its u.
You have two choices. Shall we review each of these choices in particulars:
1st choice is to just ignore this e-mail. As a consequence, I am going to send your actual video recording to all your your personal contacts and then think regarding the embarrassment you can get. And likewise if you happen to be in a romantic relationship, exactly how it would affect?
Second choice would be to pay me $3000. We will regard it as a donation. In this scenario, I will without delay discard your video recording. You can carry on with everyday life like this never took place and you never will hear back again from me.
You will make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).
BTC Address: 1FodnT6ZPNFY3YdQ5ZPTM5iK7EmiupRvVR
[case sensitiveso copy and paste it]
If you may be making plans for going to the authorities, look, this email can not be traced back to me. I have taken care of my actions. I am just not attempting to demand much, I prefer to be rewarded. I have a special pixel within this e-mail, and at this moment I know that you have read this email message. You have one day in order to pay. If I don’t receive the BitCoins, I definitely will send your video to all of your contacts including members of your family, colleagues, and so forth. Nonetheless, if I do get paid, I will destroy the video right away. If you want to have proof, reply Yea! & I will certainly send your video to your 15 friends. This is the non-negotiable offer, therefore do not waste my time & yours by replying to this email.
I had the exact same email today.
Bunch of crooks. Decided to ignore it. The password it quoted hasn’t been used in quite some time.
I too have received an email on this twice this week now. What is concerning is that the people above seem to be from around the world so where have they got the passwords from?
On another track if the FBI (or other agencies) really want to crack down on these then perhaps they need to look at the email carriers that are always used. I note the reply emails are ‘xxxxx@outlook.com’. Now, if the FBI are prepared to prosecute the likes of KimDotCom for allowing ‘Piracy’ on MegaUpload then perhaps they should also go after Microsoft & ISP’s for allowing the email services to be used for fraud….just a though.
So, krebsonsecuirty, what recommendations can yo make to protect ourselves? especially onto mobile phones….
There is a large breach compilation database of username and password combinations circulating among the criminals. It has been out since fall 2017, that is my guess to the source password list.
How do you know they actually came from Microsoft’s servers? Did you examine the e-mail headers carefully and trace the IP address the sender used to send the mail from back to them? Unless you actually have proof that the mail came from their servers then just going by the address being @outlook.com or @msn.com is worthless. Criminals have been faking (spoofing) e-mail addresses for years, as long as e-mail has been a thing. Until you dig deeper and figure out the path the message took to get to you don’t assume an e-mail came from who you think it did.
On 07/19/2018 at 1:00AM
Wolfy Erdman
rutherfordxsmp@outlook.com
Messages’ subject came as: Re: and shows password
Camera disabled and blocked, no porn.
Password is very old
Required Amount: $ 2900
Send To This Bitcoin Address: 19QjTkcye973xYPzSCXHu1oYg8Vad3vy1W
If I had proof of anything on somebody I would add a capture or image of that attached to ease and get money quick. I hate these bastards
I received one of the sextortion scams yesterday almost verbatim of the example above saying my Password was sportzdad1 I have not ever used that password although it is close. I thought it was just a scam.
I’ve also received an analog scam, with a password that’s not used in any website for a moment. Thanks for this article 🙂
Got it to from Esmerelda Facey
aveprkzj@outlook.com
Also got it today.
Same text as in one of the comments, also old old old but real password from at that time ICQ messaging software.
Interesting is: apparently there is a different bitcoin address in each email, which enables the perpetrator to pinpoint who has paid him – and obviously allowing for further.
I’ve just checked some of the bitcoin addresses mentioned here in the several examples on the Blockchain explorer. Some of them have received the payment.
Also coming from @outlook.com in my case, asking $3200.
Good luck everyone…
This is the second almost identical email I’ve had recently, but this time it mentions an old password.
I am well aware ******** one of your pass word. Lets get straight to the purpose. You may not know me and you’re probably wondering why you’re getting this e mail? Not a single person has paid me to check about you.
Well, I placed a malware on the X vids (adult porn) web site and guess what, you visited this site to have fun (you know what I mean). While you were viewing videos, your web browser started working as a Remote control Desktop having a key logger which gave me access to your display screen as well as web cam. after that, my software program gathered every one of your contacts from your Messenger, FB, as well as email . After that I created a video. 1st part shows the video you were viewing (you’ve got a nice taste ; )), and 2nd part displays the recording of your web camera, yea its u.
There are 2 choices. Why dont we go through these choices in details:
Very first option is to disregard this e-mail. As a result, I will send out your very own video to each of your your personal contacts and also consider regarding the disgrace you will definitely get. Do not forget in case you are in a relationship, how it will certainly affect?
In the second place solution should be to compensate me $3000. Lets name it as a donation. Consequently, I will straightaway eliminate your video. You could keep going on your life like this never occurred and you will never hear back again from me.
You will make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google search engine).
BTC Address: 1E9aru8xPGbpyttY6zUN3NUGqC6KGArXye
[case SENSITIVE, copy and paste it]
In case you are thinking about going to the authorities, okay, this e mail cannot be traced back to me. I have covered my steps. I am also not attempting to charge a fee very much, I prefer to be compensated. I have a special pixel within this e-mail, and now I know that you have read this email. You now have one day to make the payment. If I don’t receive the BitCoins, I will certainly send out your video recording to all of your contacts including members of your family, colleagues, and so forth. Nonetheless, if I receive the payment, I will destroy the video immidiately. It is a non-negotiable offer and thus don’t waste my time & yours by replying to this email. If you really want evidence, reply Yes! then I definitely will send your video recording to your 8 friends.
================
As I have no webcam I am 100% certain that this is a scam, but it could easily fool someone.
En el día de hoy recibí un correo idéntico a todos los que se transcriben aquí.
También colocan una contraseña que hace muchísimos años que no utilizo y es evidente que se trata de un intento de estafa para ver si alguno cae y paga lo que piden (en el caso de mi correo piden u$s 3.000.-).
I got the same today. Scared the crap out of me! Running a rootkit scanner now, and thinking of wiping my computer.
I do know ******** is your pass. Lets get directly to purpose. No person has paid me to investigate about you. You may not know me and you are probably thinking why you’re getting this email?
Well, I placed a malware on the 18+ video clips (porn material) website and do you know what, you visited this site to have fun (you know what I mean). When you were watching videos, your browser began operating as a Remote Desktop that has a key logger which provided me with access to your display screen as well as web cam. Right after that, my software gathered your entire contacts from your Messenger, FB, as well as e-mailaccount. Next I created a double video. First part shows the video you were viewing (you have a fine taste rofl), and 2nd part displays the view of your cam, yeah it is you.
You get a pair of possibilities. We should review the possibilities in particulars:
1st choice is to ignore this e-mail. As a consequence, I am going to send out your actual tape to almost all of your contacts and then just consider about the embarrassment that you receive. Not to mention should you be in a relationship, how it is going to affect?
Number 2 option is to give me 3000 USD. Let us think of it as a donation. In this case, I most certainly will straightaway eliminate your videotape. You could continue on with your life like this never occurred and you never will hear back again from me.
You will make the payment through Bitcoin (if you don’t know this, search for “how to buy bitcoin” in Google search engine).
BTC Address: 1MjWKRQvD17ecBpFs8VyrWCMCFwJW3E52a
[CASE SENSITIVE so copy and paste it]
Should you are curious about going to the law enforcement, surely, this e mail can not be traced back to me. I have taken care of my moves. I am just not trying to charge you so much, I want to be paid. You now have one day to make the payment. I’ve a special pixel in this e-mail, and right now I know that you have read this message. If I don’t get the BitCoins, I will definately send out your video to all of your contacts including members of your family, colleagues, and many others. Having said that, if I receive the payment, I will destroy the recording right away. This is the non:negotiable offer, that being said don’t waste my time & yours by responding to this message. If you really want evidence, reply with Yeah! then I will certainly send out your video to your 14 contacts.
I also received this email on 7/19. The PW in the subject line was my “weak” PW that I used 8-10 years ago:
Lets get directly to the point. Not one person has compensated me to investigate about you. You may not know me and you’re probably thinking why you’re getting this mail?
In fact, I actually installed a software on the 18+ video clips (porn material) web site and there’s more, you visited this website to experience fun (you know what I mean). When you were viewing video clips, your browser initiated functioning as a Remote control Desktop with a keylogger which gave me accessibility to your display and web camera. after that, my software gathered your entire contacts from your Messenger, social networks, as well as e-mail . And then I made a double video. First part shows the video you were viewing (you have a fine taste ; )), and second part displays the view of your web camera, and it is u.
You do have a pair of options. Shall we go through each of these choices in details:
1st alternative is to ignore this message. In this instance, I most certainly will send your actual video recording to each one of your personal contacts and thus imagine concerning the disgrace that you receive. Keep in mind in case you are in a relationship, just how it can affect?
Other choice should be to pay me $3000. Lets refer to it as a donation. In this case, I most certainly will instantly discard your video. You will continue on your daily routine like this never occurred and you will not hear back again from me.
You’ll make the payment via Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).
BTC Address to send to: 1MF4HyXMZkvNqqZbcM5fPBZqRfX3mYEdWV
[CASE SENSITIVE, copy & paste it]
In case you are planning on going to the cop, okay, this e-mail can not be traced back to me. I have dealt with my actions. I am also not looking to demand a whole lot, I simply prefer to be compensated. You have one day to pay. I have a specific pixel in this message, and now I know that you have read through this email. If I do not receive the BitCoins, I will definitely send out your video recording to all of your contacts including friends and family, co-workers, and so forth. Having said that, if I do get paid, I’ll erase the video right away. If you need evidence, reply Yeah! & I will send out your video to your 6 friends. This is a non-negotiable offer, that being said do not waste my personal time & yours by responding to this mail.
Brian, your blogs are always useful and very much appreciated, this one included. I also have been targeted with this scam. I have looked for a place to report it to as the FBI would not be the place to reach out to in Canada. As far as I can tell in Canada you should report fraudulent behaviours to the police *and* to the anti-fraud website of government of Canada. Let me know if there are other options.
http://www.antifraudcentre-centreantifraude.ca/reportincident-signalerincident/index-eng.htm
I also recieved this email 07/19/18.. Has anyone actually not paid and had anything released? They have the right idea.. I mean there arent many people who havent watched porn..
not planning on paying but not sure what to believe with the advances in technology hacking.
Do you really think they have anything on you or anyone, at this scale it’ll take years to collect all the evidence, and its not easy to hack to someone’s computer.
I also received this mail today … and the funny thing is … I am an old granny … and my lid of my laptop is closed … so the video would be in the dark … you will see nothing … and I am certainly not surfing porn at my age. So he could make my day … and show me the black screen. What is disturbing is that he used part of my password … hope he rots in hell.