New Year, New Extortion Scam

The new year has brought a new flavour of spam: attempted extortion. In the last week received two messages that are a blatant attempt at extortion (see copy below) whereby the senders are attempting to extort money from the recipient or they claim to release a video of you performing a sexual act to all of your contacts and Facebook friends.

We consider this message to be a malicious spam message. We strongly recommend all customers that receive this message delete it immediately and do not attempt to open or download any attachments.

This is a step up from phishing as these malicious individuals are not only playing on people's insecurities but fear of potential social embarrassment and exposure (no pun intended). Electronic extortion is growing, not only by email but also but by direct action. We know of organisations who've had their IT equipment hacked and their data encrypted with the malicious party demanded a substantial ransom to release their data.

We recommend all customers to ensure that they have up-to-date security software installed as well as the latest Windows and other software updates.

Examples of Message

Message 1

ATTN: demoadmin@taxioffice.net

THIS IS NOT A JOKE - I AM DEAD SERIOUS!

Hi perv,

The last time you visited a p0rnographic website with teens,
you downloaded and installed software I developed.

My program has turned on your camera and recorded
the process of your masturbation.

My software has also downloaded all your email contact lists
and a list of your friends on Facebook.

I have both the 'Demoadmin.mp4' with your masturbation
as well as a file with all your contacts on my hard drive.

You are very perverted!

If you want me to delete both the files and keep the secret,
you must send me Bitcoin payment. I give you 72 hours for payment.

If you don't know how to send Bitcoins, visit Google.

Send 2.000 USD to this Bitcoin address immediately:

34DYvLobRmK1NEnBpKN4YMAHvRXmRPEbyM
(copy and paste)

1 BTC = 3,580 USD right now, so send exactly 0.563864 BTC
to the address provided above.


Do not try to cheat me!
As soon as you open this Email I will know you opened it.

This Bitcoin address is linked to you only,
so I will know if you sent the correct amount.
When you pay in full, I will remove the files and deactivate my program.

If you don't send the payment, I will send your masturbation video
to ALL YOUR FRIENDS AND ASSOCIATES from your contact list I hacked.

Here are the payment details again:

Send 0.563864 BTC to this Bitcoin address:

----------------------------------------
34DYvLobRmK1NEnBpKN4YMAHvRXmRPEbyM
----------------------------------------

You саn visit police but nobody will help you. I know what I am doing.
I don't live in your country and I know how to stay anonymous.

Don't try to deceive me - I will know it immediately - my spy ware is
recording all the websites you visit and all keys you press.
If you do - I will send this ugly recording to everyone you know,
including your family.

Don't cheat me! Don't forget the shame and if you ignore this message your
life will be ruined.

I am waiting for your Bitcoin payment.

If you need more time to buy and send 0.563864 BTC,
open your notepad and write '48h plz'.
I will consider giving you another 48 hours before I release the vid.

Anonymous Hacker

Message 2

LAST WARNING demoadmin@taxioffice.net!

You have the last chance to save your social life - I am not kidding!!

I give you the last 72 hours to make the payment before I send
the video with your masturbation to all your friends and associates.

The last time you visited a erotic website with young Teens,
you downloaded and installed the software I developed.

My program has turned on your camera and recorded your act of
Masturbation and the video you were masturbating to.
My software also downloaded all your email contact lists
and a list of your Facebook friends.

I have both the 'Demoadmin.mp4' with your masturbation
and a file with all your contacts on my hard drive.
You are very perverted!

If you want me to delete both files and keep your secret,
you must send me Bitcoin payment. I give you the last 72 hours.
If you don't know how to send Bitcoins, visit Google.

Send 2000 USD to this Bitcoin address immediately:

3P6QJU8moSxLL9N5f4HNjKWyZYZyoLT9SB
(copy and paste)

1 BTC = 3470 USD right now, so send exactly 0.588125 BTC
to the address above.

Do not try to cheat me!
As soon as you open this Email I will know you opened it.

This Bitcoin address is linked to you only,
so I will know if you sent the correct amount.
When you pay in full, I will remove both files and deactivate my software.

If you don't send the payment, I will send your masturbation video
to ALL YOUR FRIENDS AND ASSOCIATES from your contact list I hacked.

Here are the payment details again:

Send 0.588125 BTC to this Bitcoin address:

----------------------------------------
3P6QJU8moSxLL9N5f4HNjKWyZYZyoLT9SB
----------------------------------------


You саn visit the police but nobody will help you.
I know what I am doing.
I don't live in your country and I know how to stay anonymous.

Don't try to deceive me - I will know it immediately - my spy ware is
recording all the websites you visit and all keys you press.
If you do - I will send this ugly recording to everyone you know,
including your family.

Don't cheat me! Don't forget the shame and if you ignore this message
your life will be ruined.

I am waiting for your Bitcoin payment.

Evalyn
Anonymous Hacker


P.S. If you need more time to buy and send 0.588125 BTC,
open your notepad and write '48h plz'.
I will consider giving you another 48 hours before I release the vid,
but only when I really see you are struggling to buy bitcoin.

Some final points

Whilst we've added the senders (evalyn-767@a.i-hack.cf and sabina-100@h.anonymous-hacked.ga) to our list of blocked senders, realistically this will not stop the messages. The senders will simply use a different sender address. The sender address actually means very little as it is ludicrously easy to send an email purporting to be from any address.