Skip to main content

I received this recently ...

 

This message was identified as spam. We'll delete it after 9 days. It's not spam

 
 
 
 
Hello!

My nickname in darknet is grantley88.
I hacked this mailbox more than six months ago,
through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.

So, your password from saintxxxx.co.uk is xxxx (HE GOT MY E MAIL AND PART OF AN OLD PASSWORD CORRECT - I CHANGED MY PASS AGES AGO)

Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.

I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.

I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!

During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!

I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $875 is quite a fair price to destroy the dirt I created.

Send the above amount on my BTC wallet (bitcoin): 1NXNt72qfMhPZDffUEqryCYpEUzyR6LmgH
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.

Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it!

Since reading this letter you have 48 hours!
After your reading this message, I'll receive an automatic notification that you have seen the letter.

I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!
 
 
. . . SO AM I AT RISK??

Replies sorted oldest to newest

Saint posted:

Well as they know part of an old pass word I alerted my e mail provider just to be sure

I think that's wise.

 

I'm no expert, but I suspect he may have access to info from previous hacks. If you've  changed your passwords (as you have), I'd think you'll be OK. 

 

Still, I would recommend: 

Make sure you're backed-up;

Make sure your antivirus protection is up to date;

 Do a malware scan on your AV, and ideally also on a specialized product such as Malwarebytes.

 

I'm sure other FMs like El Loro can help more. 

Eugene's Lair
Eugene's Lair posted:
Saint posted:

Well as they know part of an old pass word I alerted my e mail provider just to be sure

I think that's wise.

 

I'm no expert, but I suspect he may have access to info from previous hacks. If you've  changed your passwords (as you have), I'd think you'll be OK. 

 

Still, I would recommend: 

Make sure you're backed-up;

Make sure your antivirus protection is up to date;

 Do a malware scan on your AV, and ideally also on a specialized product such as Malwarebytes.

 

I'm sure other FMs like El Loro can help more. 

Sprout

Hi Saint I had a similar one last week where they put one of my passwords on the subject of the email which means it has been hacked in the past...that scared me. It went on to say that they had taken over my computer remotely with malware and that they had used my camera to record me watching porn! (lol at this point I started to relax and guess it was a hoax}and if I didnt send them a load of bitcoins they would send the images to all my contacts on email and social media. I trashed it. So I hope you do the same 

Amythist

Action Fraud has just replied to Tracey Cosford's report and this is what they have said:

 

Action Fraud Hi Tracey, Iā€™m sorry to see that you have received this email. This is a very common scam email which if responded to, you are asked to pay the amount of money shown on the email to keep these apparent videos/pictures from being leaked. If you have not responded to this in any way, you can forward it onto our phishing email address which is: NFIBPhishing@city-of-london.pnn.police.uk . Kind regards, Shannon (Action Fraud Advisor)

 

El Loro

Thank you El Loro and Amy

 

I ran a full Antivirus and AntiSpyWare scan - it took MacAfee 5hours and it came back with nothing.

A year ago my e mail was frozen by OutLook as they said a hack had been attempted - I renewed my pass to the one I use now without any further concern.

These threatening e mails are quoting 'most' of my old pass word but not using the pass word in full - a letter or a number is missing.

 

I contacted OutLook last night but have had no response - I've had no  further threatening e mails either

Saint
Saint posted:

Well I did a Malwarebytes free scan and it said there were 7 identified threats - 6 PUP/optional ā€¦ and 1 Generic Malware

All were quarantined

 

Interesting that MacAfee didn't find any but Malwarebytes has.

It also gives me an option to reinstall these threats if I want to!!

Different AV programs use different algorithms: thatā€™s why I use several tools. 99% of the time I rely on my standard AV, but every so often - and particularly when Iā€™ve had a ā€˜scareā€™ like youā€™ve had - I wheel out MalwareBytes.

 

Often the ā€˜threatsā€™ MB identifies are just executables youā€™ve installed legitimately but it doesnā€™t recognise - hence the ā€˜reinstallā€™ option. That ā€˜Generic Malwareā€™ threat is worrying, though... 

Eugene's Lair
Last edited by Eugene's Lair
Saint posted:

https://account.microsoft.com/

 

Got reply from OutLook saying they are dealing with lots of this type of threat and to delete it

They suggest changing my pass word and provided the above link for me to change it

I haven't clicked it

I think that's the official site. The Manage Account tab would be the one to log into. They are right in advising you to change your password. Once logged in go to the Security page and change your password.

El Loro

 

Saint, I would have had a word with our cybercrime unit, but it sounds like you have started to do some of the things I would suggest.

 

I wonder how many of the FM's have actually got backups of their important personal data?   If not - DO IT NOW !!

 

I would also suggest that if you are worried about the device you are using has been compromised, log onto your accounts from a clean, known device and make the password changes from there. I always suggest reinstalling or resetting devices on a regular basis, it's like an MOT for your computer/device. 

 

Enthusiastic Contrafibularities
Eugene's Lair posted:
Saint posted:

Well I did a Malwarebytes free scan and it said there were 7 identified threats - 6 PUP/optional ā€¦ and 1 Generic Malware

All were quarantined

 

Interesting that MacAfee didn't find any but Malwarebytes has.

It also gives me an option to reinstall these threats if I want to!!

Different AV programs use different algorithms: thatā€™s why I use several tools. 99% of the time I rely on my standard AV, but every so often - and particularly when Iā€™ve had a ā€˜scareā€™ like youā€™ve had - I wheel out MalwareBytes.

 

Often the ā€˜threatsā€™ MB identifies are just executables youā€™ve installed legitimately but it doesnā€™t recognise - hence the ā€˜reinstallā€™ option. That ā€˜Generic Malwareā€™ threat is worrying, though... 

THANK YOU TO ALL WHO HAVE CONTRIBUTED 

 

Malwarebytes also give an option to reinstall that "Generic Malware" but I've 'quarantined' it, which makes it safe.

Saint

I had this one too ... in which they claim to have recorded me watching porn. I almost felt like asking them to post the video ... Iā€™ve never watched porn in my life (oh, take that back, saw Debbie Does Dallas back in the day ... have never wrapped my sandwiches in cling film since!) ... all I could imagine was me going ewwwwwww and tipping my head sideways to try and work out the angles!!

Rexi
Rexi posted:

I had this one too ... in which they claim to have recorded me watching porn. I almost felt like asking them to post the video ... Iā€™ve never watched porn in my life (oh, take that back, saw Debbie Does Dallas back in the day ... have never wrapped my sandwiches in cling film since!) ... all I could imagine was me going ewwwwwww and tipping my head sideways to try and work out the angles!!

Rofl 

Baz
Amythist posted:

Hi Saint I had a similar one last week where they put one of my passwords on the subject of the email which means it has been hacked in the past...that scared me. It went on to say that they had taken over my computer remotely with malware and that they had used my camera to record me watching porn! (lol at this point I started to relax and guess it was a hoax}and if I didnt send them a load of bitcoins they would send the images to all my contacts on email and social media. I trashed it. So I hope you do the same 

Did you not ask them to send you a copy as well, as you'd be interested to watch yourself watching porn too. It screams CON to me as it is badly worded and spelled.

Extremely Fluffy Fluffy Thing

It's a scam they have nothing... My local paper ran a story on it a couple of months ago (the email was worded slightly differently but along the same lines) 

It's a scam that has popped up (always asking for Bitcoin) and i think the idea came from a Black Mirror episode 'Shut up and dance' it's a really really good episode. I'd go as far as to say the best imo but i do love them all.

Jen-Star

I had a look in an email address browser I rarely use and see that I got exactly the same message as Saint's though from a different sender

 

It's clearly a scam so I've ignored it. You are welcome to see all the photos that my computer has taken of me but you won't see much as there's no camera attached

(changed the password though)

El Loro
El Loro posted:

I think the scammers got hold of very old passwords on hotmail and outlook email accounts and sent the scam emails hoping to con people. The password it mentioned in the email sent to me would have been many many years ago and I'd changed it many times since.

Iā€™ve had the Spotify scam....and an Apple scam in the last week ....and I used to be on outlook decades ago ....so you might be right El ....needless to say they are on a hiding to nothing with me 

Baz

A similar scam email to the one Saint had in his opening post is circulating at present. I received this the other day. Anyone getting a similar post should delete it and ignore the threat.

 

"Hello!

I am a hacker who has access to your operating system.
I also have full access to your account.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.

If you want to prevent this,
transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is: (I've excluded the address)

After receiving the payment, I will delete the video and you will never hear me again.
I give you 50 hours (more than 2 days) to pay.
I have a notice reading this letter, and the timer will work when you see this letter.

Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.

If I find that you have shared this message with someone else, the video will be immediately distributed.

Best regards!"

El Loro
Eugene's Lair posted:
Saint posted:

Well as they know part of an old pass word I alerted my e mail provider just to be sure

I think that's wise.

 

I'm no expert, but I suspect he may have access to info from previous hacks. If you've  changed your passwords (as you have), I'd think you'll be OK. 

 

Still, I would recommend: 

Make sure you're backed-up;

Make sure your antivirus protection is up to date;

 Do a malware scan on your AV, and ideally also on a specialized product such as Malwarebytes.

 

I'm sure other FMs like El Loro can help more. 

Saint ^ this.

 

I have had the very same email. I laughed, because I do not have a webcam, so they would be supremely clever to have captured my intimate moments!!

 

As Eugene has said, they will have picked up your old passwords and email details from compromised password lists held by legitimate companies who have had their database knicked! Think companies like Facebook. I also had them present parts of my real passwords, but I knew I had changed them.

 

They also spoof emails from friends as well, saying Hey! EC! look what I have just been sent, featuring you!!!! . There is usually a link, by clicking the link they then know that someone is using the email address and also they may install real trojans/viruses onto your computer/device when you click the link - DON'T CLICK THE LINK.

 

When you change password, do it on a computer/device you know is clean. I use the works computer as I know they run anti virus and are behind a firewall and also a DMZ.

 

One thing I always do is to completely reinstall the O/S on my computers once a year, formatting the HD before. I then reinstall just the apps I need. It's like an MOT for the computer.  Keep your virus software up to date along with any software update from Microsoft/Android/Apple/ etc...

 

Back up regularly

Back up regularly

Back up regularly

Got that!

Back up regularly

 

 

 Today ...as if by magic

 

Just Park: Belfast company flags data breach hitting thousands

 
JustPark logo
The details of more than 4,500 customers stored by JustPark were available to be viewed

The details of more than 4,500 people were published on the website of a new parking app.

 

The discovery on the corporate section of the JustPark system was made by a Belfast business owner.

 

Names, email addresses, mobile numbers, car makes and registrations from across the UK were all made available.

 

JustPark, which took over the running of the Department for Infrastructure's parking app last month, has since amended the glitch.

 

The information was on the section of the website where the business which made the discovery registered and paid for parking.

 

The amount businesses were paying and their parking history was also available to see.

 

'Our details are out there now'

The issues was raised by Barry Hamilton, the owner of cleaning service Until It's Done.

 

He told BBC News NI he "couldn't believe how easy it was" to access the information.

 

"We were also seeing some of the companies weren't here in Northern Ireland, so it's not just a Northern Ireland issue, this is potentially something for the whole of the UK," he said.

Enthusiastic Contrafibularities
Last edited by Enthusiastic Contrafibularities

Those fake emails from friends and contacts do seem to be from those who use yahoo email. If you look at the email address of the sender it tends to be the real address up to @ but then different from the @ in place of yahoo.
https://www.bbc.co.uk/news/business-41493494

All 3 billion Yahoo accounts were hacked back in 2013 so the hackers got everyone's email address but not their log in details.

El Loro
El Loro posted:

Those fake emails from friends and contacts do seem to be from those who use yahoo email. If you look at the email address of the sender it tends to be the real address up to @ but then different from the @ in place of yahoo.
https://www.bbc.co.uk/news/business-41493494

All 3 billion Yahoo accounts were hacked back in 2013 so the hackers got everyone's email address but not their log in details.

Yes, I had a yahoo account many years ago , so Iā€™m guessing thatā€™s where mine are coming from . Iā€™ve not used it in years ....not since I started using Apple ....and I donā€™t even know what the password is any more 

Baz
Baz posted:
El Loro posted:

Those fake emails from friends and contacts do seem to be from those who use yahoo email. If you look at the email address of the sender it tends to be the real address up to @ but then different from the @ in place of yahoo.
https://www.bbc.co.uk/news/business-41493494

All 3 billion Yahoo accounts were hacked back in 2013 so the hackers got everyone's email address but not their log in details.

Yes, I had a yahoo account many years ago , so Iā€™m guessing thatā€™s where mine are coming from . Iā€™ve not used it in years ....not since I started using Apple ....and I donā€™t even know what the password is any more 

I was referring to emails received from people with Yahoo accounts. It might be that you get more having had a Yahoo account in the past. I do get some of these fake emails but have never had a Yahoo account. The ones I get are from people with Yahoo accounts.

El Loro
El Loro posted:
Baz posted:
El Loro posted:

Those fake emails from friends and contacts do seem to be from those who use yahoo email. If you look at the email address of the sender it tends to be the real address up to @ but then different from the @ in place of yahoo.
https://www.bbc.co.uk/news/business-41493494

All 3 billion Yahoo accounts were hacked back in 2013 so the hackers got everyone's email address but not their log in details.

Yes, I had a yahoo account many years ago , so Iā€™m guessing thatā€™s where mine are coming from . Iā€™ve not used it in years ....not since I started using Apple ....and I donā€™t even know what the password is any more 

I was referring to emails received from people with Yahoo accounts. It might be that you get more having had a Yahoo account in the past. I do get some of these fake emails but have never had a Yahoo account. The ones I get are from people with Yahoo accounts.

I think itā€™s probably my old yahoo contacts list that they are working from El ....but I could be wrong ....I frequently am 

Baz
El Loro posted:

Those fake emails from friends and contacts do seem to be from those who use yahoo email. If you look at the email address of the sender it tends to be the real address up to @ but then different from the @ in place of yahoo.
https://www.bbc.co.uk/news/business-41493494

All 3 billion Yahoo accounts were hacked back in 2013 so the hackers got everyone's email address but not their log in details.

Thanks for that insight, EL.

 

I hadn't had a fake email for a little while, and then - like you - got one a couple of days ago. I didn't initially think too much about it, but I've just checked and it is indeed impersonating a friend's yahoo address... 

 

FWIW, the "real" second part of the address appears to be from Russia (though who really knows?)

Eugene's Lair

Add Reply

×
×
×
×
Link copied to your clipboard.
×
×