Sexploitation Email

colinw

Just to make people aware of this scam as someone I work with received one of these this Morning and as they use a real password they can be quite convincing. They seem to have pinched a bunch of people's real password and then use it in an email which claims they have caught them using a !!!!!! site and have used the camera to get video evidence, they then ask the person to pay 7000 USD, this person was savvy enough to realise it was a con and she had not been to the !!!!!! site in question but I suppose there are people it might catch out

https://www.mirror.co.uk/tech/phishing-scam-known-sextortion-using-12928730

AndyPix

Old news , but always good to keep it fresh in peoples minds

colinw

AndyPix wrote: »

Old news , but always good to keep it fresh in peoples minds

Well she only received the email this Morning Andy so it is still about

JJ_Egan

No doubt it will be about for years and years .As will the fools that pay up .

Mee

This has arrived via neighbourhoodalert.co.uk

Extortion Scam


Cyber criminals send victims their own passwords in extortion scam
Cyber criminals are attempting to blackmail unsuspecting victims by claiming to have used the victims' password to install spying malware on the victims' computer. The criminals claim they’ve recorded videos of the victim watching adult material by activating their webcam when they visit these websites. What makes this scam so convincing is that the email usually includes a genuine password the victim has used for one of their online accounts. We believe criminals obtain the passwords from data breaches.
What to do if you get one of these emails?
Don’t reply to the email, or be pressured into paying. The police advise that you do not pay criminals. Try flagging the email as spam/junk if you receive it multiple times. Perform a password reset as soon as possible on any accounts where you’ve used the password mentioned in the email. Always use a strong, separate password for important accounts, such as your email. Where available, enable two-factor authentication (2FA). Always install the latest software and app updates. Install, or enable, anti-virus software on your laptops and computers and keep it updated.

If you receive one of these emails, report it to Action Fraud’s phishing reporting tool. If you have received one of these emails and paid the ransom, report it to your local police force.

Message Sent By
Action Fraud (Action Fraud, Administrator, National)

arciere

I normally reply to this kind of scam emails to see how long I can drag it out before the scammers realise I'm just wasting their time.

My record is 7 emails from them. Need to improve.

Stoke

Honestly, I'd love to receive one of these.... just because I'd take the !!!! so hard.

However on a serious note.... How are they getting your password is what most journos covering this story are wondering?
Well, it's easy enough. There are now so many database dumps leaked online, that with an e-mail address, they can find your hashed password, probably to some small time forum you signed up for 5 years ago, and then (assuming it's a weak password), they match it to a rainbow table and voila, they now have your password and their in. It's almost clever, but it's not.... it's just script kiddies being script kiddies once again.

Try it yourself, google your e-mail address in " ".

Quite honestly, people are terrified of things that they shouldn't be terrified of. The Internet isn't your enemy. Random people just aren't your friends. "Hello Sir, I'm your friend, I'm the Crown Prince of God Knows Where and I have 10 Gazillion Dollars in a Locker down the local train station, all I need is you to transfer me 300 dollars for a taxi and I'll transfer you half".... Yeah okay friend.

You could easily kill one of these by replying

"photo please, then you get your money". You'll never get a reply.

Edit:
Also, not that I give a !!!!, but I checked the bitcoin address from the Mirror article. He's made a sum total of £0 running this scam. Sounds like he'd be better leaving his musky sweaty bedroom where he eats nothing but Dominoes pizza all day and plays world of warcraft and going out, getting a job, being a productive member of society. But hey, that's just my opinion.

DoaM

Stoke wrote: »

Try it yourself, google your e-mail address in " ".

Just tried it ...

No results found for "my email address".

(Email address obviously redacted in this post).

Stoke

DoaM wrote: »

Just tried it ...



(Email address obviously redacted in this post).

Good result that is. Guessing you've not signed up to many forums in the past? I have, for everything from cars to electronics to lighting etc, you only need one compromised. The solution is, I always see these accounts as temporary. Once I have my answer, I am unlikely to participate much in the ongoing discussions, so I use an intentionally simple password that I won't use elsewhere.

motorguy

DoaM wrote: »

Just tried it ...



(Email address obviously redacted in this post).

Have a look here...

https://haveibeenpwned.com/

If your email address was registered with any site that has been compromised in the past, they will generally know about it.

motorguy

colinw wrote: »

Just to make people aware of this scam as someone I work with received one of these this Morning and as they use a real password they can be quite convincing. They seem to have pinched a bunch of people's real password and then use it in an email which claims they have caught them using a !!!!!! site and have used the camera to get video evidence, they then ask the person to pay 7000 USD, this person was savvy enough to realise it was a con and she had not been to the !!!!!! site in question but I suppose there are people it might catch out

https://www.mirror.co.uk/tech/phishing-scam-known-sextortion-using-12928730

Its blatantly obvious its a con. You'd be extremely foolish just to send off $7,000 on the back of it.