{"id":14569,"date":"2019-02-11T11:10:06","date_gmt":"2019-02-11T19:10:06","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/02\/11\/news-8319\/"},"modified":"2019-02-11T11:10:06","modified_gmt":"2019-02-11T19:10:06","slug":"news-8319","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2019\/02\/11\/news-8319\/","title":{"rendered":"Sextortion Bitcoin scam makes unwelcome return"},"content":{"rendered":"

Credit to Author: Christopher Boyd| Date: Mon, 11 Feb 2019 18:38:53 +0000<\/strong><\/p>\n

Heads up: a particularly nasty sextortion<\/a>\u00a0Bitcoin scam from at least the middle of 2018 is making the rounds once again.<\/p>\n

The scam involves making use of old breach dumps, then emailing someone from the list and reminding them of their old password.<\/p>\n

When something lands in your mailbox with \u201cHey, remember this?\u201d it\u2019s a surefire way to focus the reader’s attention. Pressure is then applied to start sending over some Bitcoin\u2026or else.<\/p>\n

What is the threat being made?<\/h3>\n

The generally accepted theory is that the scammer digs up personally identifiable information from\u00a0old data breaches<\/a>, including email addresses and passwords, plugs it into some sort of automated script, and then fires out thousands of emails.<\/p>\n

Those mails reach people from said breach<\/a>, and they then see talk of somebody \u201cknowing\u201d their login details. That\u2019s then used as leverage to claim the attacker has access to their PC, files, folders, webcams, browsing history\u2014in a nutshell, anything personal and sensitive. The scarier they can make it sound, the better. In fact, one of the more eye-popping claims<\/a> is that the scammer has video of the user viewing adult websites, and they will share this video with all the user’s contacts unless they pony up and pay a Bitcoin ransom.<\/p>\n

And in classic ransomware fashion, there\u2019s typically a ticking clock. Giving users a short time limit to deliver the payment\u00a0<\/em>is\u00a0social engineering at its finest.<\/p>\n

What next?<\/h3>\n

The recipient may well have a panic attack, that\u2019s what. To be suddenly confronted with an ancient (but potentially still active) password is certainly going to give a bit of a shock to the system. It\u2019s at this point the confusion sets in, as they start to wonder what on Earth the attacker has. Did they really see what they claimed to see? Do they actually have video footage? What other potentially embarrassing (or worse) content could they use to extort and blackmail?<\/p>\n

What do they really have?<\/h3>\n

A large throne of lies, is what.<\/p>\n

Yes, they have your password from a long time ago.<\/p>\n

No, they do not have access to your computer. And no, even if you were checking out adult sites, they don’t have video of you doing so.<\/p>\n

What they might have is access to your email account associated with the breach, if you haven\u2019t changed the password since it took place. They could also potentially start trying to log into other accounts you have with the same password. If this is the case, you should fire up a password manager and get to work changing things.<\/p>\n

In fact, you should do that if you share passwords across accounts<\/a> in any case.<\/p>\n

Okay, back to the scam.<\/p>\n

What does the email say?<\/h3>\n

It\u2019s a fairly standard template, and hunting for portions of the below mail will throw up any number of hits in Google and other search engines.<\/p>\n

\"\"<\/a><\/p>\n

Click to enlarge<\/p>\n

The email reads as follows:<\/p>\n

\n

I am well aware [REDACTED] is your pass words. Lets get right to point. Neither anyone has paid me to investigate you. You may not know me and you are probably thinking why you’re getting this e-mail?\u00a0<\/span><\/em><\/p>\n

actually, i installed a software on the adult videos (pornographic material) web-site and do you know what, you visited this website to have fun (you know what i mean). While you were viewing videos, your web browser began working as a Remote Desktop that has a keylogger which gave me accessibility to your display and also cam. Just after that, my software gathered every one of your contacts from your Messenger, Facebook, as well as email . after that i created a double video. 1st part displays the video you were viewing (you’ve got a nice taste haha), and next part shows the recording of your cam, yeah its you.\u00a0<\/span><\/em><\/p>\n

You have not one but two choices. Shall we read up on these options in aspects:\u00a0<\/span><\/em><\/p>\n

First alternative is to just ignore this message. in such a case, i am going to send out your actual video to every single one of your personal contacts and think regarding the awkwardness you will definitely get. and definitely if you happen to be in a loving relationship, how it would affect?\u00a0<\/span><\/em><\/p>\n

Number 2 solution is to pay me $889. Lets name it as a donation. in this situation, i most certainly will asap remove your video footage. You could carry on daily life like this never occurred and you surely will never hear back again from me.<\/em><\/p>\n

You’ll make the payment through Bi\u200ctco\u200cin (if you don’t know this, search for ‘how to buy b\u200citcoi\u200cn’ in Google).\u00a0<\/span><\/em><\/p>\n

B\u200cT\u200cC\u200c ad\u200cdre\u200css to send to:\u00a0[REDACTED]<\/em><\/p>\n

[CaSe sensitive, copy & paste it]\u00a0<\/span><\/em><\/p>\n

if you are wondering about going to the law enforcement officials, well, this message can not be traced back to me. I have dealt with my actions. i am also not attempting to demand a huge amount, i would like to be compensated. within this%} emaiQUNdkpeC [SIC] if i do not receive the \u200cbi\u200ctco\u200cin\u200c, i will send your video recording to all of your contacts including family members, coworkers, and so forth. Having said that, if i receive the payment, i will erase the recording immediately. If you really want proof, reply Yup then i will send out your video to your 9 friends. This is a non-negotiable offer, so don’t waste mine time and yours by replying to this e mail.<\/em><\/p>\n<\/blockquote>\n

That\u2019s pretty sneaky<\/h3>\n

It is, and I\u2019d be surprised if there aren\u2019t many others waking up to emails identical to the above. Should you receive one yourself, do the following:<\/p>\n

    \n
  1. Don\u2019t panic. They absolutely do not have the keys to your computer.<\/li>\n
  2. See if the email in question pops up over on Haveibeenpwned<\/a>.<\/li>\n
  3. See if your password<\/a> does the same thing.<\/li>\n
  4. At this point, you may have a fairly good idea which breach they grabbed your old login from, which is always useful information to have.<\/li>\n
  5. Delete the email you were sent, and under no circumstances pay them a penny\/dime\/insert currency of choice here.<\/li>\n<\/ol>\n

    Scare tactics: an evil practice<\/h3>\n

    The anonymous sender of these mails doesn\u2019t care about the trauma they could cause at the other end. These missives would be particularly traumatic for anyone involved in (say) a revenge porn case previously. And make no mistake, generic Internet blackmail threats can kill<\/a>.<\/p>\n

    If you\u2019re able to report these mails for spam\/abuse before deleting, do so. There\u2019s a remote chance you could actually save someone\u2019s life while making the Internet a little safer into the bargain.<\/p>\n

    The post Sextortion Bitcoin scam makes unwelcome return<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

    https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Credit to Author: Christopher Boyd| Date: Mon, 11 Feb 2019 18:38:53 +0000<\/strong><\/p>\n\n\n\n
    <\/a><\/td>\n<\/tr>\n
    A well-worn sextortion scam is back in user’s inboxes. We explain what to look for and why recipients shouldn’t panic.<\/p>\n

    Categories: <\/p>\n