Update 4/9/20: A large email extortion campaign is underway. More information can be found in today's Large email extortion campaign underway, DON'T PANIC! article.
Reports are coming in about a new extortion scam where scammers email you stating that they know the recipient's password, have installed malware on the computer, created videos of the recipient using adult web sites through their webcam, and have stolen the recipient's contacts.
The good news is that this is just a scam and no one has caught the recipient doing anything they don't want seen on video. The bad news, though, is that these attackers may actually know a recipients password from data breaches.
Yesterday a BleepingComputer member posted in our forums about this type of email scam and then security researcher SecGuru discovered a similar email, shown above, today.
@malwrhunterteam This looks legitimate ;-) p.s. the password comes from Leakforums. BTC Address: 1KiCTVUq5A9BPwoFC8S965tsbtqcWr8bty pic.twitter.com/rjXGW2oboZ
— SecGuru (@SecGuru_OTX) July 12, 2018
SecGuru told BleepingComputer that the extortionists are finding leaked account credentials from data breaches and using those leaked passwords when contacting the victim. This adds a sense of legitimacy to the emails as the victims will see passwords that they are currently using or have used in the past.
Once again, this is a scam, nothing has been installed on your computer, and they do not have any video of you doing anything. Therefore, do not be concerned if you receive one of these emails. At the same time, if the passwords sent in the email is one that you are currently using, I strongly suggest you change it immediately.
The full text of one of these extortion email scam can be seen below:
From: Beitris Englert
Date: July 12, 2018
Subject: (username + password)
It seems that, (password), is your password. You may not know me and you are probably wondering why you are getting this e mail, right?
actually, I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean). While you were watching videos, your internet browser started out functioning as a RDP (Remote Desktop) having a keylogger which gave me accessibility to your screen and web cam. after that, my software program obtained all of your contacts from your Messenger, FB, as well as email.
What did I do?
I created a double-screen video. 1st part shows the video you were watching (you've got a good taste haha . . .), and 2nd part shows the recording of your web cam.
exactly what should you do?
Well, in my opinion, $2900 is a fair price for our little secret. You'll make the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in Google).
BTC Address: 1KiCTVUq5A9BPwoFC8S965tsbtqcWr8bty
(It is cAsE sensitive, so copy and paste it)
Important:
You have one day in order to make the payment. (I've a unique pixel in this e mail, and at this moment I know that you have read through this email message). If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on. Having said that, if I receive the payment, I'll destroy the video immidiately. If you need evidence, reply with "Yes!" and I will certainly send out your video recording to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by responding to this message.
These scammers have my password! Now what?
If you receive one of these extortion emails and it contains one of your actual passwords, you should immediately change it at any and all sites that you are currently using it. It is also strongly suggested that you use unique passwords at every site you visit and setup 2 factor authentication if its available.
You should also enter your email address at Troy Hunt's https://haveibeenpwned.com/ site to see what data breaches your account credentials were included in. Have i been pwned? is a site where you can enter an email address and get a list of data breaches where your email address was disclosed to attackers.
You can then use this information to change the password used at any sites that were affected by this breach.
Even though this particular scam campaign is all fake and they do not have video of you, if you are concerned and live in the U.S.A. you should also file a complaint with the FBI using the ic3.gov site. For other countries, do a similar search for "cybercrime complaint" to submit the complaint to your country's associated law enforcement agency.
Comments
Pointless_noise - 5 years ago
This is almost word for word the same email that hit a number of universities in the UK about 3 months ago. Looks like the crooks have expanded their operations to a wide scale spam campaign.
ssgaware29 - 5 years ago
This is same scam happened in Feb month see reference below,
https://myonlinesecurity.co.uk/attempted-blackmail-scam-watching-porn/
Didier Stevens - 5 years ago
I researched this today and discovered, sadly, that at least 3 victims already paid between $1900 and $3900.
More info on my research here:
https://blog.nviso.be/2018/07/13/sextortion-scam-with-leaked-passwords-succeeds/
Govaertb - 5 years ago
Hi, I received today the following e-mail from a certain Gregorio Nelson:
I'm going to cut to the chase. I am aware “””””is your password. More to the point, I do know about your secret and I've evidence of this. You do not know me personally and no one paid me to examine you.
It is just your bad luck that I discovered your bad deeds. The truth is, I placed a malware on the adult video clips (sexually graphic) and you visited this site to experience fun (you know what I mean). When you were busy watching video clips, your web browser started out operating as a Rdp (Remote control desktop) having a key logger which provided me with access to your display as well as web cam. Immediately after that, my software program gathered your complete contacts from your social networks, as well as email.
I then gave in much more hours than I should have looking into your life and made a two view video. 1st part shows the video you were watching and second part shows the recording of your web cam (its you doing dirty things).
Honestly, I am willing to forget everything about you and allow you to get on with your regular life. And I am going to offer you two options which will accomplish that. The two options are to either ignore this letter, or simply just pay me $ 3200. Let’s explore these 2 options in more details.
First Option is to ignore this mail. You should know what is going to happen if you opt this path. I will send out your video recording to all of your contacts including family members, coworkers, and many others. It does not save you from the humiliation you and your family will must face when friends discover your sordid videos from me.
Other Option is to send me $ 3200. We will name this my “confidentiality tip”. Now let me tell you what happens if you choose this path. Your secret remains your secret. I will destroy the video immediately. You go on with your lifetime as though none of this ever occurred.
At this point you may be thinking, “I should go to the cops”. Without a doubt, I have taken steps to ensure this email cannot be tracked time for me and yes it won't prevent the evidence from destroying your lifetime. I am not trying to dig a hole in your pocket. I just want to be paid for efforts and time I put in investigating you. Let's hope you have chosen to generate pretty much everything go away and pay me the confidentiality fee. You will make the payment by Bitcoins (if you do not know how, search "how to buy bitcoins" on search engine)
Amount to be sent: $ 3200
Bitcoin Address to Send to: 15DXWiU8dLYNSsXhZCuwLH5sc7jz6B9xSP
(It's case sensitive, so copy and paste it)
Tell no person what you will be sending the bitcoin for or they possibly will not offer it to you. The procedure to get bitcoins can take a few days so do not wait.
I have a special pixel in this mail, and right now I know that you've read this mail. You have 48 hours to make the payment. If I do not get the Bitcoin, I will send out your video recording to all your contacts including friends and family, co-workers, and many others. You better come up with an excuse for friends and family before they find out. Nevertheless, if I do get paid, I'll destroy the video immediately. It's a non-negotiable offer, so please don't waste my personal time and yours. Time is running out.
What should I do with it.
Thanks in advance.
Regards.
Bart
JohnnyJammer - 5 years ago
I have seen these for over a year so this isnt anything new.
apouche - 5 years ago
I received the exact same email almost word for word as @govaertb yesterday as well. Reported to French PHAROS service.
interesting2018 - 5 years ago
Very interesting. I got the following Email today. They reduced the value to $1.000:
I do know XXXXXXXXXX one of your pass word. Lets get directly to point. You don't know me and you are probably thinking why you are getting this mail? No one has compensated me to check about you.
In fact, I actually placed a malware on the 18+ videos (porn material) site and there's more, you visited this website to have fun (you know what I mean). When you were viewing videos, your web browser began working as a Remote Desktop that has a keylogger which provided me with accessibility to your screen and also cam. after that, my software collected your entire contacts from your Messenger, social networks, as well as email . After that I created a video. First part shows the video you were watching (you've got a nice taste rofl), and 2nd part shows the view of your web cam, and it is u.
You have two different possibilities. We should understand these types of possibilities in aspects:
Very first alternative is to skip this email. In such a case, I most certainly will send your actual video clip to every one of your personal contacts and imagine about the humiliation you experience. And likewise in case you are in an affair, precisely how it will affect?
Other choice is to pay me $1000. We will think of it as a donation. In this scenario, I most certainly will immediately erase your video recording. You will keep going daily life like this never happened and you never will hear back again from me.
You'll make the payment via Bitcoin (if you do not know this, search "how to buy bitcoin" in Google search engine).
BTC Address to send to: 15Zym96Kh1S9mjA6Fv6waoaxiKx1uNsspj
[case SENSITIVE so copy and paste it]
If you may be wondering about going to the law enforcement, okay, this mail can not be traced back to me. I have covered my moves. I am not looking to demand a lot, I simply want to be compensated. I have a special pixel in this e mail, and right now I know that you have read through this email message. You have one day to pay. If I do not get the BitCoins, I definitely will send out your video to all of your contacts including family members, coworkers, etc. However, if I do get paid, I will erase the recording right away. If you really want evidence, reply Yeah! & I will certainly send your video recording to your 12 friends. This is the nonnegotiable offer, so please do not waste mine time and yours by replying to this email message.
jch02140 - 5 years ago
I just received a similar email with a password that I no longer used for a very long time. I have reported and deleted the email...
GDAADG - 5 years ago
I received the e-mail below today. I have not used that password in a long time. My email address has been owned 7 times. They are asking me to pay 7,000 USD. I did view a porn movie on a website, but I suppose I should not worry too much...Comments please?
Quote
I am aware xxxxxx is your pass word. Lets get directly to the purpose. Absolutely no one has compensated me to check you. You do not know me and you are most likely wondering why you are getting this e mail?
In fact, I actually setup a malware on the 18+ videos (sex sites) website and you know what, you visited this web site to have fun (you know what I mean). When you were viewing video clips, your web browser started out functioning as a RDP with a key logger which provided me with access to your display screen and webcam. Just after that, my software collected all your contacts from your Messenger, social networks, as well as e-mailaccount. And then I created a double video. 1st part shows the video you were watching (you've got a fine taste ; )), and next part displays the recording of your web camera, yea its you.
You get two choices. We are going to take a look at each one of these solutions in particulars:
First choice is to just ignore this email message. In this case, I will send out your actual video clip to just about all of your contacts and thus consider regarding the awkwardness you can get. And as a consequence if you are in a committed relationship, how it would affect?
Second option will be to compensate me $7000. I will call it a donation. Then, I will straight away delete your video. You could keep going on everyday life like this never took place and you would never hear back again from me.
You'll make the payment via Bitcoin (if you don't know this, search "how to buy bitcoin" in Google).
BTC Address to send to: 1ABbEd51bZS33i3gfvAX1BZL33sgNFyjTz
[CASE-sensitive, copy and paste it]
In case you are looking at going to the authorities, anyway, this e-mail can not be traced back to me. I have dealt with my steps. I am not looking to charge you very much, I would like to be rewarded. You now have one day in order to pay. I've a unique pixel in this message, and now I know that you have read through this e mail. If I do not receive the BitCoins, I will send your video recording to all of your contacts including members of your family, colleagues, and so on. Nevertheless, if I receive the payment, I will erase the video immediately. This is the non:negotiable offer, therefore don't waste mine time and yours by responding to this mail. If you need proof, reply with Yes and I will certainly send out your video to your 7 contacts.
Unquote
Didier Stevens - 5 years ago
"I did view a porn movie on a website, but I suppose I should not worry too much...Comments please?
"
Don't worry at all, this is a scam, they did not install malware on your machine, they are lying.
AtlanticoNSEO - 5 years ago
Hi, vry good article. This is my first post here.
I received yesterday (almost) exactly the same mail, from a certain Derek Armel:
««XXXXXXXX (one password I once used) is one of your Password now I'm going to cut to the chase. You do not know me however I know you and you must be thinking why you're getting this e-mail, correct?
I placed malware on sex video clips (porn) and guess what, you accessed same porn web site to have pleasure (if you know what I mean). When you were watching video clips, your device started operating as a RDP (Remote Control Desktop) having a backdoor which allowed me accessibility to your screen and also your web cam recordings. Immediately after that, the malware collected every one of your contacts from your messenger, social networks, as well as e-mail.
What I want?
It's simply your bad luck that I saw your misdemeanor. Next, I put in more time than I should've investigating into your personal life and prepared a double-screen video. 1st half displays the video you had been watching and 2nd half shows the view of your web cam (its someone doing naughty things). As a family man, I am willing to remove all about you and allow you to move on with your regular life. And I will offer you two options which will accomplish your freedom. The two alternatives are either to turn a blind eye to this letter (bad for you), or pay me 0.5 BTC.
Exactly what should you do?
Let us examine above two options in depth. Option One is to ignore my e-mail. Let me tell you what will happen if you pick this path. I will definitely send out your video to all your contacts including family members, coworkers, etc. It doesn't save you from the humiliation your self will face when family and friends uncover your dirty videotape in their inbox. Wise choise is to send me 0.5 BTC. We will name it my “keep the secret charges”. Now Lets discuss what happens if you choose this way out. Your little secret remains private. I'll keep my mouth closed. Once you make the payment, You can freely go on with your routine life and family like nothing ever happened. You will make the transfer through Bitcoin
Amount to be sent: 0.5 BTC
BTC ADDRESS: 1AA8iVbhy9jjzHwQH1DM3Yvu5STntn2vwo (etc. rtc. ...)»»
Since Idon't live in the USA, I will follow this to the competent authorities in this country.
Thanks for the help.
mastoxxx - 5 years ago
:) I received the same scam message ... from this scammer, I can assure you it's fake... but about password you must change it if it's a main password. (ykme2990@iris.eonet.ne.jp)
--------------------
It seems that, xxxxxxxxxx, is your password. You may not know me and you are probably wondering why you are getting this e mail, right?
actually, I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean). While you were watching videos, your internet browser started out functioning as a RDP (Remote Desktop) having a keylogger which gave me accessibility to your screen and web cam. after that, my software program obtained all of your contacts from your Messenger, FB, as well as email.
What did I do?
I created a double-screen video. 1st part shows the video you were watching (you've got a good taste haha . . .), and 2nd part shows the recording of your web cam.
exactly what should you do?
Well, in my opinion, $1000 is a fair price for our little secret. You'll make the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in Google).
BTC Address:
1Bb446YF8AZK3nKchPJQ3J5KwPGRHRARJ5
(It is cAsE sensitive, so copy and paste it)
Important:
You have one day in order to make the payment. (I've a unique pixel in this e mail, and at this moment I know that you have read through this email message). If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on. Having said that, if I receive the payment, I'll destroy the video immidiately. If you need evidence, reply with "Yes!" and I will certainly send out your video recording to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by responding to this message.
------------------
Chrisdm2312 - 5 years ago
I've just received this email earlier today. Mine doesn't contain a password but it contains the last 4 digits of my phone number. What shall I do?
Thanks
Chris
Didier Stevens - 5 years ago
It's a variation of the scam Chris, you can just delete the email (or report it as SPAM if you are using Gmail, for examplee).
We've seen similar examples: https://isc.sans.edu/forums/diary/New+Extortion+Tricks+Now+Including+Your+Partial+Phone+Number/23982/
Cyberoid - 5 years ago
I received the scam notice yesterday and alerted all the authorities ... who will think me quite mad. Well, I am angry, it consumed my afternoon. What was discouraging was the author's access to my phone number and a common email address, probably from scraping a webform. I wish there was a way to send back a data bomb to detonate his/her PC, but no doubt only a bot was behind the actual commission of extortion. What also was discouraging was how many DNS registrars keep terrible or no records of website operators. ICANN must do better disciplining them!
Just_me123 - 5 years ago
I've gotten an almost exact copy of this, is it something to worry about? I'm only 13 and this is very worrying for me. They got the exact numbers of contacts on my phone but it was an old password and I don't have a webcam on my computer. Maybe phone cam?
This is very scary so please can someone answer?
Just_me123 - 5 years ago
"I've gotten an almost exact copy of this, is it something to worry about? I'm only 13 and this is very worrying for me. They got the exact numbers of contacts on my phone but it was an old password and I don't have a webcam on my computer. Maybe phone cam?
This is very scary so please can someone answer? "
Didier Stevens - 5 years ago
Please do not worry, the criminals sending out these emails are flat out lying: they don't have pictures or movies of you.
CeeStyleDj - 5 years ago
I must admit, after reading this email, I was a little frightened. And I've worked in I.T. n the past. I have to thank you for your website and explanation. I really appreciate it and it made me feel relieved. I will say that it took me a really long time to login after registering for some reason. I do have one question. Does reporting this to that government site have any type of effect? or is it a wasted effort? They are probably not going to be able to track down those email addresses and they are going to have less luck with the Bitcoin addresses such as my case. Thanks.
Lawrence Abrams - 5 years ago
It always helps to report scams, extortion threats, and cybercrime to the authorities as most law enforcement will need a complaint to actively investigate activity like this.
charmainehartmann - 5 years ago
Hi, I have had about 10 of those emails. I really thought they would be sick of sending them to me, by now. Idiots.
Lawrence Abrams - 5 years ago
If you receive any new ones that are different then the above, please share them with me. Interested in seeing new variants.
tirtikli - 5 years ago
Dear friends,
Some months ago, I viewed some porn sites and downloaded somethings. and one or two days later, I got an e-mail like the one below. yes It was one of my passwords. I scanned my computer with spyhunter and it found CoreBot trojan. Then I changed all my passwords and than formatted my computer and installed a fresh windows. but, then, I have been getting it periodically. (in fact almost same e-mails with little changes). I really frightened.
Is that possible to take screenshots or record video with that program? can they get all my contacts etc? if yes, what should I do? They keep sending e-mails like this one once a week or two weeks etc.
-----------
I know xxxxx your passwords. Lets get right to purpose. Neither anyone has compensated me to check about you. You may not know me and you are probably wondering why you are getting this e-mail?
Let me tell you, i actually setup a malware on the 18+ vids (porn) site and there's more, you visited this website to have fun (you know what i mean). While you were viewing video clips, your internet browser started out functioning as a RDP with a keylogger which gave me access to your display screen and also web cam. immediately after that, my software program collected all of your contacts from your Messenger, social networks, and email . after that i created a double-screen video. 1st part shows the video you were viewing (you've got a good taste lmao), and 2nd part displays the recording of your web camera, & it is u.
There are not one but two solutions. Why dont we take a look at each of these choices in particulars:
Very first alternative is to disregard this e mail. in this case, i am going to send your very own video recording to just about all of your contacts and then think concerning the awkwardness that you receive. Not to forget in case you are in a relationship, exactly how it is going to affect?
Number 2 alternative is to pay me USD 999. We are going to regard it as a donation. as a consequence, i most certainly will immediately eliminate your video recording. You could keep your way of life like this never occurred and you would never hear back again from me.
You'll make the payment through Bitcoin (if you don't know this, search for 'how to buy bitcoin' in Google).
BTC address to send to: 1J1V5NdEv2AtoQX6tvSibExdaPRbJX4oaB
[CaSe-sensitive so copy and paste it]
if you may be looking at going to the cops, surely, this e mail cannot be traced back to me. I have taken care of my moves. i am just not looking to charge you so much, i simply want to be compensated. You now have two days in order to make the payment. i have a special pixel in this email, and at this moment i know that you have read through this email message. if i don't get the BitCoins, i will definitely send your video to all of your contacts including friends and family, colleagues, etc. Having said that, if i do get paid, i will erase the video immediately. if you really want proof, reply Yup then i will certainly send your video to your 10 friends. it is a non-negotiable offer, therefore please don't waste my time & yours by responding to this e-mail.
------
Cyberoid - 5 years ago
Once again: it's a scam. According to law-enforcement experts who've been logging these extortion attempts, precisely zero victims have been outed by anyone. It's an old ploy from earlier Internet days updated and repurposed by crackers overseas -- primarily in Russia, but also in unusual locales like Malaysia -- hoping to rake in a few hundreds or thousands of dollars (as bitcoins) from the gullible and the "guilty."
Although some people have fallen for this scheme, paying in desperation, there are no credible reports of anyone having been outed to their contacts or anyone else. Have you received any compelling evidence from your anonymous blackmailers that they have the video records they claim? Probably not. And you never will. So stop worrying. If you're sufficiently offended, you can file with the US Internet Crimes Complaint Center a confidential complaint -- anonymously, if you prefer -- that will be taken seriously (https://www.ic3.gov/complaint/default.aspx/).
However....
Take this as an early warning and armor yourself so that you can ignore these pathetic threats and avoid more serious breaches of your online privacy. If you take appropriate security measures -- for example, using a virtual private network (VPN), available for a few dollars a year (I like the easy to use NordVPN, https://nordvpn.com/), and/or using the freely-accessible Tor browser and network (https://www.torproject.org/) -- your online habits will become virtually unknowable, even to Google and your ISP. Then you can relax to enjoy whatever gets you off. Just keep it legal.
PS If you're a Mac user, I highly recommend ClamX (https://www.clamxav.com/). It's a streamlined, constantly-updated anti-malware application that prevents intrusions and quarantines or deletes bad juju, as you specify. Best of all, it comes with reassuringly human support to deal with situations like yours.
beancounter1 - 4 years ago
This scam is still in play. Got message almost identical to above this week. I rarely check my spam folder, but I did this week, and to my horror I saw this. The only time I have been guilty of visiting a site similar to what is described here is on an iphone and/or chrome book while in ‘guest mode’. Is what they are alleging even possible, given that? Responding to sender appears impossible as it must be a fake (undeliverable message back). NOTE: between the paragraphs of the note I received, I found the 'password' duplicated several times with gibberish in between (My printer and immersive reader picked up on that, but none of the giberish seemed to match any passwords in my vault, no idea what that was). The main password cited in their note was not in my password vault and I cannot even remember using it,, no idea where it came from. Wished I had never checked spam folder, horrifying stuff..
ThxForThisSite - 4 years ago
I just received an almost verbatim email except they'd claimed to have hacked my iPhone. Really appreciate the open forum discussion, as the threat was relative to my professional e-mail account and had me quite concerned. I did see that on https://haveibeenpwned.com/ LinkedIn was listed as a site where my data had been breached and it corresponds to a site where I would have used my professional e-mail address and used the password referenced.
It was concerning given the fact that the email used my professional email address but referenced my "week" password that I rarely use for work related site access, hence giving their claim to key-logging some validity (in my mind).
Your forum has put my mind at ease, THANK YOU!
KingDamien - 4 years ago
Hello everyone i got this email today the password in the email was not the same as a real password that i use everyday but pretty close one character different... should i change the password .
The eamil i received:
I know,XXXXXXXX, is your password. You don't know me and you're thinking why you received this e mail, right?
Well, I actually placed a malware on the porn website and guess what, you visited this web site to have fun (you know what I mean). While you were watching the video, your web browser acted as a RDP (Remote Desktop) and a keylogger which provided me access to your display screen and webcam. Right after that, my software gathered all your contacts from your Messenger, Facebook account, and email account.
What exactly did I do?
I made a split-screen video. First part recorded the video you were viewing (you've got a fine taste haha), and next part recorded your webcam (Yep! It's you doing nasty things!).
What should you do?
Well, I believe, $1900 is a fair price for our little secret. You'll make the payment via Bitcoin to the below address (if you don't know this, search "how to buy bitcoin" in Google).
BTC Address:
bc1qenv3xw49q9pegnpl6r3eg03j9r7m90p6yczk56
(It is cAsE sensitive, so copy and paste it)
Important:
You have 24 hours in order to make the payment. (I have an unique pixel within this email message, and right now I know that you have read this email). If I don't get the payment, I will send your video to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immidiately. If you want evidence, reply with "Yes!" and I will send your video recording to your 5 friends. This is a non-negotiable offer, so don't waste my time and yours by replying to this email.
Lawrence Abrams - 4 years ago
Can you share the subject of the email you received?
This is a scam and they have not created any videos of you.
The password, though, was taken from a data breach, so if your password is similar, you should change it to something harder and try to use unique passwords at every site you visit.
kam1kaz3nl77 - 4 years ago
Just got this a few minutes ago (with my password and email adress as the subject of the email). Well i've got no Webcam, so sux on him, but i was worried for a bit (but not after reading that part)
================
I know, ********, is your password. You don't know me and you're thinking why you received this e mail, right?
Well, I actually placed a malware on the porn website and guess what, you visited this web site to have fun (you know what I mean). While you were watching the video, your web browser acted as a RDP (Remote Desktop) and a keylogger which provided me access to your display screen and webcam. Right after that, my software gathered all your contacts from your Messenger, Facebook account, and email account.
What exactly did I do?
I made a split-screen video. First part recorded the video you were viewing (you've got a fine taste haha), and next part recorded your webcam (Yep! It's you doing nasty things!).
What should you do?
Well, I believe, $1900 is a fair price for our little secret. You'll make the payment via Bitcoin to the below address (if you don't know this, search "how to buy bitcoin" in Google).
BTC Address:
bc1qm0c754xh8r6epxtzp72ckdz6zz2ve6jnf6c6s7
(It is cAsE sensitive, so copy and paste it)
Important:
You have 24 hours in order to make the payment. (I have an unique pixel within this email message, and right now I know that you have read this email). If I don't get the payment, I will send your video to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immidiately. If you want evidence, reply with "Yes!" and I will send your video recording to your 5 friends. This is a non-negotiable offer, so don't waste my time and yours by replying to this email.
Donovan
==========================
Pasting email it was sent from here:
Donovan Weissbourd <acabigailmp@outlook.com>
DsherMe - 4 years ago
My friend in Australia received the email described above (Email Subject was his name and something that may have been a password he had once used)
He had used an iPhone recently to peruse pornhub and fuq sites and became distraught.
Thanks to BleepingComputer his mind was put at ease (especially on reading yesterday's article https://www.bleepingcomputer.com/news/security/large-email-extortion-campaign-underway-dont-panic/)
I support putting the scammer to death, for risking my friend's mental health.
acioni61 - 4 years ago
Hello to everyone!
Thanks so much to this site to make me feel calm after receiving this morning an extortion email.
Here is my scam extortion email. I feel safe and I will not pay any money to this evil.
This scammer should be send to 30 years jail time!!
et70 - 4 years ago
Received this one today. Little different but assuming same scam?
et70 - 4 years ago
Is there any truth possible? That they hacked iPhone.
Lawrence Abrams - 4 years ago
It's a scam.
Cyberoid - 4 years ago
I recommend, if you've received one or more of these scams, that you report them:
• If you live outside the USA, to your national police and/or Interpol, https://www.interpol.int/en/Crimes/Financial-crime/Business-Email-Compromise-Fraud/.
• If you live in the USA, to the FBI Internet Crime Complaint Center (IC3),
https://www.ic3.gov/default.aspx
It's unlikely they will respond, but your report will assist in building national and global collective records that are used to identify and arrest fraudsters.
Also, inform your email host/provider, who should be filtering such garbage.
... And for your own sake, if you are a Mac, iPhone, or iPad user, I recommend installing SpamSieve, the most effective spam filtering software I've come upon. Its author has worked continuously to improve SpamSieve for almost 20 years, since it was introduced in 2002. I use it religiously to eliminate at least 25% of my daily email -- junk mail and outright spam -- on my Mac. https://c-command.com/spamsieve/.
On my Android phone, I do much the same, though with less flexibility, using Kaspersky (controversial, I know) and Norton anti-spam apps, together with my wireless provider Verizon's built-in filtering system. When I use Blue Mail, a free server-based email service, I use its reliable and simple to use blocking mechanism. I'm sure there are Windows equivalents. It's so nice not to be bothered.
PS. One more thing. If you get offensive or scammy email, help everyone by using your email reader to capture not only the text but also the headers that precede what you normally see. (On Mac Mail, use View-->Message-->All Headers.) Make a copy of the entire email, with headers, and send it to the alleged point of origin. For example, if I get one of these pretending it's from XYZ.com, I send the copy to "Security" or "Fraud" @ XYZ.com (whatever XYZ suggests on its website) and let them deal with it. As such mail mostly originates overseas, the alleged source is in a better position to identify the culprits and has more to gain by using legal and/or technical means to eliminate them.
Jeep-Freek - 3 years ago
Laughable on many levels! I don't frequent, nor have I ever been on, any kind of "adult site"! My computer doesn't even have a web cam! Amateur effort, at best.
radisson - 3 years ago
I too got this email but I heard from different people about it so I was prepared. It's just a pity that some people will fall for this . Guess it's just like fishing Great site Lawrence Abrams!