The Road Ahead

We have updated our Privacy Policy to reflect some additional security measures that are being implemented on our website. As part of these security improvements, we will now be recorded additional information when customers log into MyAccount. These additional values will be used for security auditing and to identify possible unexpected logons.

Read and review our Privacy Policy and other Legal Documents and Policies.

The new year has brought a new flavour of spam: attempted extortion. In the last week received two messages that are a blatant attempt at extortion (see copy below) whereby the senders are attempting to extort money from the recipient or they claim to release a video of you performing a sexual act to all of your contacts and Facebook friends.

We consider this message to be a malicious spam message. We strongly recommend all customers that receive this message delete it immediately and do not attempt to open or download any attachments.

This is a step up from phishing as these malicious individuals are not only playing on people's insecurities but fear of potential social embarrassment and exposure (no pun intended). Electronic extortion is growing, not only by email but also but by direct action. We know of organisations who've had their IT equipment hacked and their data encrypted with the malicious party demanded a substantial ransom to release their data.

We recommend all customers to ensure that they have up-to-date security software installed as well as the latest Windows and other software updates.

Examples of Message

Message 1

ATTN: demoadmin@taxioffice.net

THIS IS NOT A JOKE - I AM DEAD SERIOUS!

Hi perv,

The last time you visited a p0rnographic website with teens,
you downloaded and installed software I developed.

My program has turned on your camera and recorded
the process of your masturbation.

My software has also downloaded all your email contact lists
and a list of your friends on Facebook.

I have both the 'Demoadmin.mp4' with your masturbation
as well as a file with all your contacts on my hard drive.

You are very perverted!

If you want me to delete both the files and keep the secret,
you must send me Bitcoin payment. I give you 72 hours for payment.

If you don't know how to send Bitcoins, visit Google.

Send 2.000 USD to this Bitcoin address immediately:

34DYvLobRmK1NEnBpKN4YMAHvRXmRPEbyM
(copy and paste)

1 BTC = 3,580 USD right now, so send exactly 0.563864 BTC
to the address provided above.


Do not try to cheat me!
As soon as you open this Email I will know you opened it.

This Bitcoin address is linked to you only,
so I will know if you sent the correct amount.
When you pay in full, I will remove the files and deactivate my program.

If you don't send the payment, I will send your masturbation video
to ALL YOUR FRIENDS AND ASSOCIATES from your contact list I hacked.

Here are the payment details again:

Send 0.563864 BTC to this Bitcoin address:

----------------------------------------
34DYvLobRmK1NEnBpKN4YMAHvRXmRPEbyM
----------------------------------------

You саn visit police but nobody will help you. I know what I am doing.
I don't live in your country and I know how to stay anonymous.

Don't try to deceive me - I will know it immediately - my spy ware is
recording all the websites you visit and all keys you press.
If you do - I will send this ugly recording to everyone you know,
including your family.

Don't cheat me! Don't forget the shame and if you ignore this message your
life will be ruined.

I am waiting for your Bitcoin payment.

If you need more time to buy and send 0.563864 BTC,
open your notepad and write '48h plz'.
I will consider giving you another 48 hours before I release the vid.

Anonymous Hacker

Message 2

LAST WARNING demoadmin@taxioffice.net!

You have the last chance to save your social life - I am not kidding!!

I give you the last 72 hours to make the payment before I send
the video with your masturbation to all your friends and associates.

The last time you visited a erotic website with young Teens,
you downloaded and installed the software I developed.

My program has turned on your camera and recorded your act of
Masturbation and the video you were masturbating to.
My software also downloaded all your email contact lists
and a list of your Facebook friends.

I have both the 'Demoadmin.mp4' with your masturbation
and a file with all your contacts on my hard drive.
You are very perverted!

If you want me to delete both files and keep your secret,
you must send me Bitcoin payment. I give you the last 72 hours.
If you don't know how to send Bitcoins, visit Google.

Send 2000 USD to this Bitcoin address immediately:

3P6QJU8moSxLL9N5f4HNjKWyZYZyoLT9SB
(copy and paste)

1 BTC = 3470 USD right now, so send exactly 0.588125 BTC
to the address above.

Do not try to cheat me!
As soon as you open this Email I will know you opened it.

This Bitcoin address is linked to you only,
so I will know if you sent the correct amount.
When you pay in full, I will remove both files and deactivate my software.

If you don't send the payment, I will send your masturbation video
to ALL YOUR FRIENDS AND ASSOCIATES from your contact list I hacked.

Here are the payment details again:

Send 0.588125 BTC to this Bitcoin address:

----------------------------------------
3P6QJU8moSxLL9N5f4HNjKWyZYZyoLT9SB
----------------------------------------


You саn visit the police but nobody will help you.
I know what I am doing.
I don't live in your country and I know how to stay anonymous.

Don't try to deceive me - I will know it immediately - my spy ware is
recording all the websites you visit and all keys you press.
If you do - I will send this ugly recording to everyone you know,
including your family.

Don't cheat me! Don't forget the shame and if you ignore this message
your life will be ruined.

I am waiting for your Bitcoin payment.

Evalyn
Anonymous Hacker


P.S. If you need more time to buy and send 0.588125 BTC,
open your notepad and write '48h plz'.
I will consider giving you another 48 hours before I release the vid,
but only when I really see you are struggling to buy bitcoin.

Some final points

Whilst we've added the senders (evalyn-767@a.i-hack.cf and sabina-100@h.anonymous-hacked.ga) to our list of blocked senders, realistically this will not stop the messages. The senders will simply use a different sender address. The sender address actually means very little as it is ludicrously easy to send an email purporting to be from any address.

We haven’t disappeared, we’re still here. The computer gods have just not being favouring us for the last couple of days.

One of our web servers, NENE, has been offline for nearly 48 hours due to events that are beyond our control. As this issue is not likely to be fixed before Friday (at the earliest), we have temporarily moved all affected websites including our own to a different server.

Our standard mail service have not been affected and are working as normal. We intentionally split our Web hosting and mail services exactly for this kind of situation.

So, what happened?

Over the past few weeks, our NENE web server has been misbehaving for no apparent reason. This behaviour was not apparent to our customers or visitors, but noticeable to us via our daily checking and monitoring.

As any investigation could cause service interruption, we held off until last weekend. Unfortunately, despite many hours of work we couldn’t trace the problem and we suspected that Windows itself may have been corrupted beyond easy repair.

As NENE is actually a virtual server, the quickest and easiest solution was to replace it with a brand new virtual machine (we had backed up all data prior to taking the server offline). With virtual servers, the process of installing and configuration is typically quicker than with physical hardware so we aimed only to be offline for a couple of hours.

So we provisioned a new virtual machine, a process that typically takes a few minutes. It didn’t. It took over six hours for our service provider to provision a new server. Once available, the new virtual server was far from healthy, with one of its’ more apparent problems being its’ inability to restart without hanging/crashing.

We’re currently sitting in a very frustrating limbo as our service provider attempts to find a fix. They’ve managed to independently replicate the problem but have yet to discover a cure.

Update 17:00, 4^th September

The latest update we have from our service provider is that they have managed to replicate the problem in their test environment and are currently investigating the underlying cause.

Update 15:30, 5^th September

Our service provider has traced the issue. However, as the fix requires some changes to their infrastructure that are unlikely to be completed before Friday (7^th September).

GDPR day has arrived. Rejoice.

Update Privacy Policy and other legal documents and agreements.

To meet the requirements and standards of GDPR, we've updated our Privacy Policy, Terms and Conditions and other legal documents. These updated policies, documents and agreements took effect from the 22nd May 2018. If you are a Calzada Media customer or a visitor to our website, please take a moment to review these important documents.

• Privacy Policy
• Terms and Conditions
• Website Terms of Use
• More legal documents and agreements

Will any services change because of GDPR?

Any purchased services or products will continue as before. We've only had had to make one small modification to our web hosting service management tools as part of our GDPR compliance.

Will I still receive messages from Calzada Media?

If you are a Calzada Media customer with an ongoing service or product, then yes. You will continue to receive messages from us regarding the product or service you have purchased. These messages include renewal notifications, billing information or advanced warning of service maintenance or upgrade. We will send these message to you as part of our legitimate business interest and to satisfy the contractual agreement between us and our customers.

Will you be sending out marketing messages?

We will only send out marketing messages to people who have explicitly consented to receive them.

Questions?

If you have any questions, please do get in touch via the support helpdesk.

As we've mentioned before, the new General Data Protection Regulation (GDPR) takes effect on 25th May 2018. GDPR replaces the Data Protection Act and applies more stringent requirements on how we gather, store and process data. Furthermore, GDPR provides more rights to those we hold data - customers and website visitors.

To meet the requirements and standards of GDPR, we've updated our Privacy Policy, Terms and Conditions and other legal documents. These updated policies, documents and agreements will take effect from the 22nd May 2018. If you are a Calzada Media customer or a visitor to our website, please take a moment to review these important documents.

• Privacy Policy
• Terms and Conditions
• Website Terms of Use

Customer Details & Consent

We have contacted individual customers in the last couple of weeks to confirm details we hold and request consent to store data where applicable. If any customer has a questions about the data we hold, please contact us via the support helpdesk

Improvements to Data Management

We've upgraded our customer portal, MyAccount, to simplify and enable customers to manage their account information, privacy and communication preferences.