Just received one of the "new" scam emails

Soldato
Joined
4 Mar 2003
Posts
12,524
Location
Chatteris
I read about these emails in the press a few days ago. I rarely receive any kind of scam email these days, so was rather surprised when one appeared a few moments ago. It's on an old email address I'm currently retiring - only kept open in case I forgot to update details somewhere. Here is the copy & paste:


Hello!
I'm a hacker who cracked your email and device a few months ago.
You entered a password on one of the sites you visited, and I intercepted it.
This is your password from <my email address was here> on moment of hack: <a compromised password I've used in the past>

Of course you can will change it, or already changed it.
But it doesn't matter, my malware updated it every time.

Do not try to contact me or find me, it is impossible, since I sent you an email from your account.

Through your email, I uploaded malicious code to your Operation System.
I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources.
Also I installed a Trojan on your device and long tome spying for you.

You are not my only victim, I usually lock computers and ask for a ransom.
But I was struck by the sites of intimate content that you often visit.

I am in shock of your fantasies! I've never seen anything like this!

So, when you had fun on piquant sites (you know what I mean!) I made screenshot with using my program from your camera of yours device.
After that, I combined them to the content of the currently viewed site.

There will be laughter when I send these photos to your contacts!
BUT I'm sure you don't want it.

Therefore, I expect payment from you for my silence.
I think $835 is an acceptable price for it!

Pay with Bitcoin.
My BTC wallet: 1JTtwbvmM7ymByxPYCByVYCwasjH49J3Vj

If you do not know how to do this - enter into Google "how to transfer money to a bitcoin wallet". It is not difficult.
After receiving the specified amount, all your data will be immediately destroyed automatically. My virus will also remove itself from your operating system.

My Trojan have auto alert, after this email is read, I will be know it!

I give you 2 days (48 hours) to make a payment.
If this does not happen - all your contacts will get crazy shots from your dark secret life!
And so that you do not obstruct, your device will be blocked (also after 48 hours)

Do not be silly!
Police or friends won't help you for sure ...

p.s. I can give you advice for the future. Do not enter your passwords on unsafe sites.

I hope for your prudence.
Farewell.


So I can see why some people might get scared. So OK, the email isn't addressed to me, however it confirms some personal information about me - an email address I've used and a password I have used.
It is littered with spelling mistakes of course and the usual "bad English" but I could understand how people might worry - nice touch on the capturing pictures, I think laptops are how the majority of people access the internet these days.

This is just such a leap forward from the old scams. If they could just use a spell checker and employ somebody to write it in "proper English" they would get such better results.
 
I have been seeing lots of people at my work being hit with a similar email recently.

Checking their email on https://haveibeenpwned.com/ usually shows they have been involved in multiple leaks and explains where the "hacker" got the details. Worryingly plenty of the users are still using the same password so they believe they have actually been hacked.
 
These have been going round for a while. Good luck trying to hit me with malware. My only Windows machine doesn't have a camera and is only used for games. My laptop doesn't run Windows and even if they got malware on that, or the browser, then the camera is an utter potato and you would hardly be able to make anything out. Also two factor authentication on email for the win.

I had a spam email today allegedly from a recruitment company for a job I apparently applied for (I didn't). They were asking for a photo of my passport before they proceeded with the interview stage. lol.
 
Yeah I work for an email company, we see a lot of these kinds of things. If I have any advice at all about email it's to be suspicious of pretty much everything you ever receive.
 
I received a spam email from "HMRC" yesterday, and apart from having an attachment and the incorrect (but easily fooling) email address of [email protected], it was pretty perfect to the normal HMRC emails I get, in graphics, layout and even signed by Alison Walsh, it even had the "If you think that an email is suspicious please report it to [email protected]." cheeky beggars!

I can see why people do get fooled with things like this
 
i get emails like these from time to time. i got one saying about me watching porn and to pay such an amount to stop them from sending it to all my contacts, haha i have no shame so it would not of bothered me.
 
I think someone has managed to reverse engineer some actual passwords from accounts that were part of the ~2014 breach at Kickstater as it seems a common denominator with a few of these that people I know have got and someone tried to log into one of my accounts (fortunately I had 2FA setup) with a working password and I'd forgotten that account used the same password as my Kickstarter account used to (the only two accounts sharing that password and using the same username).
 
It is littered with spelling mistakes of course and the usual "bad English" but I could understand how people might worry - nice touch on the capturing pictures, I think laptops are how the majority of people access the internet these days.

This is just such a leap forward from the old scams. If they could just use a spell checker and employ somebody to write it in "proper English" they would get such better results.

Why would the spelling make a difference in the context of this email?

I can understand why the ones pretending to be from your bank and asking you to log in would be identifiable as scams if they have spelling mistakes but I dont see why it makes any difference in this case?
 
I get the ones where at the end of threatening you with extortion they apologise for their bad spelling as they are X nationality :D

I also like the usage of 'burp the worm' or 'choke the chicken' they use too lol
 
I received a spam email from "HMRC" yesterday, and apart from having an attachment and the incorrect (but easily fooling) email address of [email protected], it was pretty perfect to the normal HMRC emails I get, in graphics, layout and even signed by Alison Walsh, it even had the "If you think that an email is suspicious please report it to [email protected]." cheeky beggars!

I can see why people do get fooled with things like this
lol had the exact same one into my works email. Guaranteed some other muppet at work will open it if they get it.
 
I no longer visit the sites where my passwords were probably leaked from. Is it worth going back to those sites to change to a new password which might get leaked again. The old email\password combo isn't used anywhere else nowadays.
 
... Just read another "new" scam emails thread

There are at least two active threads discussing this in software - with technical details
 
Back
Top Bottom