New Scam Email?
Author
Discussion

pc.iow

Original Poster:

1,879 posts

233 months

Thursday 25th October 2018
quotequote all
I've just received the following email, all be it in my spam box but interesting none the least.
They have my email address and one of my sons passwords, which i confirmed with him he still uses.
"Send it over", he said.
I've told him not to worry and don't be embarrassed, after all, it could be me.

Its quiet amusing as long as it is fake that is!

Email subject was,
Your password is marley.18

Levicaymen <Aaron@Smith799.edu>
To marley.18 Today at 9:31
I know marley.18 is your password. Lets get directly to purpose. You may not know me and you are most likely thinking why you are getting this email? There is no one who has paid me to check you.

actually, I actually setup a software on the X videos (porn material) website and guess what, you visited this site to experience fun (you know what I mean). While you were watching video clips, your web browser initiated functioning as a Remote Desktop that has a keylogger which provided me with access to your display screen as well as webcam. Right after that, my software program obtained all of your contacts from your Messenger, FB, as well as e-mail . After that I made a video. First part displays the video you were viewing (you have a nice taste omg), and 2nd part displays the recording of your web cam, and it is you.

You get not one but two options. Why dont we explore the possibilities in aspects:

Very first solution is to ignore this email message. Then, I will send your actual recorded material to just about all of your personal contacts and then consider concerning the disgrace you experience. And as a consequence should you be in a relationship, just how it will affect?

2nd solution should be to compensate me $5000. I will regard it as a donation. Consequently, I most certainly will without delay erase your video footage. You can carry on everyday life like this never occurred and you will not ever hear back again from me.

You will make the payment by Bitcoin (if you don't know this, search for "how to buy bitcoin" in Google).

BTC Address to send to: 1FnT42vFvvtZqAh1GZ67EQqUrZZUukGFFw
[CASE-SENSITIVE, copy and paste it]

If you are thinking about going to the cops, anyway, this email message cannot be traced back to me. I have dealt with my steps. I am not attempting to demand much, I want to be paid for.

You now have one day in order to make the payment. I have a special pixel in this message, and at this moment I know that you have read through this e-mail. If I don't receive the BitCoins, I will, no doubt send out your video recording to all of your contacts including family members, co-workers, and so forth. Nonetheless, if I receive the payment, I'll destroy the recording immediately. If you want to have evidence, reply with Yup! & I will certainly send your video recording to your 12 friends. This is the nonnegotiable offer thus do not waste my time & yours by responding to this e mail.


alex98uk

257 posts

103 months

Thursday 25th October 2018
quotequote all
Yeah, they've really been pumping these out lately. They get the email address and passwords from hacked websites. You can check where the password likely came from here:

https://haveibeenpwned.com/

Just make sure any accounts don't have that same password.

pc.iow

Original Poster:

1,879 posts

233 months

Thursday 25th October 2018
quotequote all
alex98uk said:
Yeah, they've really been pumping these out lately. They get the email address and passwords from hacked websites. You can check where the password likely came from here:

https://haveibeenpwned.com/

Just make sure any accounts don't have that same password.
Thanks Alex, the Son just sent me a link as well.
He's since sent me 3 more. I've told him not to worry or be embarrassed, we all do it.laugh

http://uk.businessinsider.com/new-email-scam-uses-...

So do you use the Why 1 Password? Its free for a month, then how much after to stop them revealing my pron interests?biggrin

alex98uk

257 posts

103 months

Friday 26th October 2018
quotequote all
pc.iow said:
Thanks Alex, the Son just sent me a link as well.
He's since sent me 3 more. I've told him not to worry or be embarrassed, we all do it.laugh

http://uk.businessinsider.com/new-email-scam-uses-...

So do you use the Why 1 Password? Its free for a month, then how much after to stop them revealing my pron interests?biggrin
They target porn because I guess they know many people watch it and would never want it publicised! However, many people who don't watch it also get the same email. I got one and I don't have a webcam ha. They just cast a wide net and see what they can catch.

I personally use LastPass as a "vault" to have randomly generated passwords for every website. Works great on my PC and phone, been very happy with it and it's good knowing that if one website gets leaked, then I don't have to worry about the others.

I hope that were LastPass to ever get hacked, that the passwords they store would be suitably encrypted so that the thieves couldn't use anything. Given that's their whole business, I suspect they're well secured.

Silverbullet767

11,300 posts

236 months

Friday 26th October 2018
quotequote all
Inspiration from here perhaps?

https://www.vox.com/culture/2016/10/21/13353676/bl...

Cracking episode btw.

Du1point8

22,911 posts

222 months

Friday 26th October 2018
quotequote all
The bit I dont get is this:


Onliner Spambot (spam list): In August 2017, a spambot by the name of Onliner Spambot was identified by security researcher Benkow moʞuƎq. The malicious software contained a server-based component located on an IP address in the Netherlands which exposed a large number of files containing personal information. In total, there were 711 million unique email addresses, many of which were also accompanied by corresponding passwords. A full write-up on what data was found is in the blog post titled Inside the Massive 711 Million Record Onliner Spambot Dump.

Compromised data: Email addresses, Passwords

It states my email and password that is never used anywhere other than email has been hacked, so they have hacked my work email server I own that has a 30 character random password thats not stored anywhere in the electronic format.

I do wonder if it just has my email as I get lots of spam anyway.

sc0tt

18,294 posts

231 months

Friday 26th October 2018
quotequote all
I had one the other day. I looked at the address and he had made about 5 grand in inwards payments in a day.

https://www.blockchain.com/btc/address/1FnT42vFvvt...


Du1point8

22,911 posts

222 months

Friday 26th October 2018
quotequote all
sc0tt said:
I had one the other day. I looked at the address and he had made about 5 grand in inwards payments in a day.

https://www.blockchain.com/btc/address/1FnT42vFvvt...
Wish I had the balls and no morals to do this as there are some fking stupid people on the planet.

alex98uk

257 posts

103 months

Friday 26th October 2018
quotequote all
Du1point8 said:
The bit I dont get is this:


Onliner Spambot (spam list): In August 2017, a spambot by the name of Onliner Spambot was identified by security researcher Benkow mo?u?q. The malicious software contained a server-based component located on an IP address in the Netherlands which exposed a large number of files containing personal information. In total, there were 711 million unique email addresses, many of which were also accompanied by corresponding passwords. A full write-up on what data was found is in the blog post titled Inside the Massive 711 Million Record Onliner Spambot Dump.

Compromised data: Email addresses, Passwords

It states my email and password that is never used anywhere other than email has been hacked, so they have hacked my work email server I own that has a 30 character random password thats not stored anywhere in the electronic format.

I do wonder if it just has my email as I get lots of spam anyway.
I expect what is more likely is that someone you've emailed has linked their accounts online. For example, LinkedIn offers to sweep your email account to look for addresses of people you can add on the LinkedIn network.

So, they may not have your password, but it may have been however your address became exposed (as opposed to your work network getting hit).

Skyedriver

23,419 posts

312 months

Saturday 23rd March 2019
quotequote all
Just received one, the first I've had.
Didn't go to Spam though, straight to inbox.

Presume it's a scam but out of curiosity, can someone actually send a virus or trojan that controls the web cam on a lap top?

Pericoloso

44,044 posts

193 months

Saturday 23rd March 2019
quotequote all
There's another thread same as this ,although this one looks to have been started first.

https://www.pistonheads.com/gassing/topic.asp?h=0&...

Edited by Pericoloso on Saturday 23 March 22:13

WyrleyD

2,336 posts

178 months

Sunday 24th March 2019
quotequote all
alex98uk said:
Du1point8 said:
The bit I dont get is this:


Onliner Spambot (spam list): In August 2017, a spambot by the name of Onliner Spambot was identified by security researcher Benkow mo?u?q. The malicious software contained a server-based component located on an IP address in the Netherlands which exposed a large number of files containing personal information. In total, there were 711 million unique email addresses, many of which were also accompanied by corresponding passwords. A full write-up on what data was found is in the blog post titled Inside the Massive 711 Million Record Onliner Spambot Dump.

Compromised data: Email addresses, Passwords

It states my email and password that is never used anywhere other than email has been hacked, so they have hacked my work email server I own that has a 30 character random password thats not stored anywhere in the electronic format.

I do wonder if it just has my email as I get lots of spam anyway.
I expect what is more likely is that someone you've emailed has linked their accounts online. For example, LinkedIn offers to sweep your email account to look for addresses of people you can add on the LinkedIn network.

So, they may not have your password, but it may have been however your address became exposed (as opposed to your work network getting hit).
I think the Linkedin connection is correct. I had the email yesterday and the email address was one I'd only ever used for Linkedin.