The "Your Mailbox Hacked and Operating System Infected with a Virus" Scam

"Be sure to read this message! Your personal data is threatened!

Hi, stranger!

I hacked your device, because I sent you this message from your account.

If you have already changed your password, my malware will be intercepts it every time.

You may not know me, and you are most likely wondering why you are receiving this email, right?

In fact, I posted a malicious program on adults (pornography) of some websites, and you know that you visited these websites to enjoy

(you know what I mean).

While you were watching video clips,

my trojan started working as a RDP (remote desktop) with a keylogger that gave me access to your screen as well as a webcam.

Immediately after this, my program gathered all your contacts from messenger, social networks, and also by e-mail.

What I've done?

I made a double screen video.

The first part shows the video you watched (you have good taste, yes ... but strange for me and other normal people),

and the second part shows the recording of your webcam.

What should you do?

Well, I think $1000 (USD dollars) is a fair price for our little secret.

You will make a bitcoin payment (if you don't know, look for "how to buy bitcoins" on Google).

BTC Address: 1NKrw3sP7C9igNozkB2Pd4VnZuk8d6WGV

(This is CASE sensitive, please copy and paste it)

Remarks:

You have 2 days (48 hours) to pay. (I have a special code, and at the moment I know that you have read this email).

If I don't get bitcoins, I will send your video to all your contacts, including family members, colleagues, etc.

However, if I am paid, I will immediately destroy the video, and my trojan will be destruct someself.

If you want to get proof, answer "Yes!" and resend this letter to youself.

And I will definitely send your video to your any 19 contacts.

This is a non-negotiable offer, so please do not waste my personal and other people's time by replying to this email.

Bye!"

Here is another scam.

14qdpR8q1hkrm1rEmJYS6hcC4RyotdwGV5 is another BTC account used by the scammers.

1DZs3Qng8jR5tnLRFbHz5AT9Go6SV25FR3 is another BTC account used by the scammers.

1DZs3Qng8jR5tnLRFbHz5AT9Go6SV25FR3 is the scammers BTC wallet:

1MeSv4fBS9BPEV5N5oySxDqnR2JLbchqF9 is another BTC account used by the scammers.

13vL3fM77TTZFsPG8Y76bSWHrDyCK3GrvF is another BTC used by scammers.

This is another bitcoin account used by scammers: 179UHmZhfhaRg1mMTHjgjR1VXP514YzZj

Another BT wallet: 1LwoM3aSGNhtPyGrH9XAZWMAxmjkFe6zLa

Another BTC accounts used by the scammers:

1JHePxmiJh11EuEZfNpooWLC4bwf8g5T3e

12W1Jhppk5MXywVQszM45KbYZuvcsfNUE7

1GLvEgpHZxBMhkcoUXP69owPTbHs51mHGe is another BitCoin account used by them.

1JHePxmiJh11EuEZfNpooWLC4bwf8g5T3e is another BTC account used by the scammers.

The scammers are using this BTC account: 1JHePxmiJh11EuEZfNpooWLC4bwf8g5T3e

Here is another scam:

"From: jonh@changa.com

Date: 8 May 2019 at 14:15:51 GMT 3

Subject: This information concerns the security of your account:

Hello!

This is important information for you!

Some months ago I hacked your OS and got full access to your account

On day of hack your account y-999@zahav.net.il has password:

So, you can change the password, yes.. Or already changed... But my malware intercepts it every time.

How I made it:

In the software of the router, through which you went online, was a vulnerability. I used it...

If you interested you can read about it: CVE-2019-1663 - a vulnerability in the web-based management interface of the Cisco routers.

I just hacked this router and placed my malicious code on it.

When you went online, my trojan was installed on the OS of your device.

After that, I made a full backup of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a not big amount of btc to unlock.

But I looked at the sites that you regularly visit, and I was shocked by what I saw!

I'm talk you about sites for adults.

I want to say - you are a BIG pervert. Your fantasy is shifted far away from the normal course!

And I got an idea...

I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?).

After that, I made a screenshot of your joys (using the camera of your device) and glued them together.

Turned out amazing! You are so spectacular!

I'm know that you would not like to show these screenshots to your friends, relatives or colleagues.

I think $730 is a very, very small amount for my silence.

Besides, I have been spying on you for so long, having spent a lot of time!

Pay ONLY in Bitcoins!

My BTC wallet: 1JHePxmiJh11EuEZfNpooWLC4bwf8g5T3e

You do not know how to use bitcoins?

Enter a query in any search engine: "how to replenish btc wallet".

It's extremely easy

For this payment I give you two days (48 hours).

As soon as this letter is opened, the timer will work.

After payment, my virus and dirty screenshots with your enjoys will be self-destruct automatically.

If I do not receive from you the specified amount, then your device will be locked, and all your contacts will receive a screenshots with your "enjoys".

I hope you understand your situation.

- Do not try to find and destroy my virus! (All your data, files and screenshots is already uploaded to a remote server)

- Do not try to contact me (you yourself will see that this is impossible, the sender address is automatically generated)

- Various security services will not help you; formatting a disk or destroying a device will not help, since your data is already on a remote server.

P.S. You are not my single victim. so, I guarantee you that I will not disturb you again after payment!

This is the word of honor hacker

I also ask you to regularly update your antiviruses in the future. This way you will no longer fall into a similar situation.

Do not hold evil! I just good do my job.

Good luck."

Here is another Bitcoin account being used by the scammers: 1EGgvLwVTQ3UGnjk4LzcPwyXaEk2Fioqd5

They are using this account: 16m1NLzSaxvgnnM4xZ2Eav1wyE6DbzGdgX

The thieves are using this BTC account 1Jr1BeJryvonjMXi5su6PieTAdFAfYPgE4, please do not send them any money because they are lying.

Another account used by scammers:

1Jr1BeJryvonjMXi5su6PieTAdFAfYPgE4

Here is another BTC account used by the scammers: 1EnVwSYoCQ5hA6fqCxh56Dzqh17BydBnCy

They are using this BTC wallet: 1MJne4rgeirTYxCwC81nJHPqox7DSsCMoe

The scammers are using this BTC account: 1HMpbheBMSLKPLyi2trv86AqNtwSTi5SsA

They are using this Bitcoin account: 1EgeutktVm8fCyNypqmVKXtcKeed6XXhKg

They are using this Bitcoin account: 1PDverTfcLYHwLHodU7NKd7uQ6t9ASAEGt

The scammers are using this BTC Wallet: 15URMetedHvPiztjWZ6g7jgYqdmFRdunw4

They are using this BTC wallet: 15pY2U8WBZBJRVxGhh8WRXsdkXQbMKD8k9

The scammers are using this BTC: 1DmaY5TrSjDs1bV611kaenmyVQULmXmT1B

They are using this BTC wallet: 1H1K8MfLEJgjCCfDEkTJmv9GJjD3XzEFGR

I got a copy too. It seems to have come from Izmir in Turkey.

"Received: (qmail 9611 invoked from network); 20 Dec 2018 13:46:12 0100

Received: from unknown (HELO mbx03) (176.220.167.145)

176.220.167.145 Turkey Izmir

TT Mobil Iletisim HizmetlerI A.S Avea Iletisim HizmetlerI A.S (is.net.tr)

Latitude 38.3239 Longitude 27.1292"

Here is another scam:

"Security Notice. [] was hacked! Change your password now!

Dear user of!

I am a spyware software developer.

Your account has been hacked by me in the summer of 2018.

I understand that it is hard to believe, but here is my evidence - I sent you this email from your account.

The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296).

I went around the security system in the router, installed an exploit there.

When you went online, my exploit downloaded my malicious code (rootkit) to your device.

This is driver software, I constantly updated it, so your antivirus is silent all time.

Since then I have been following you (I can connect to your device via the VNC protocol).

That is, I can see absolutely everything that you do, view and download your files and any data to yourself.

I also have access to the camera on your device, and I periodically take photos and videos with you.

At the moment, I have harvested a solid dirt... on you...

I saved all your email and chats from your messangers. I also saved the entire history of the sites you visit.

I note that it is useless to change the passwords. My malware update passwords from your accounts every times.

I know what you like hard funs (adult sites).

Oh, yes .. I'm know your secret life, which you are hiding from everyone.

Oh my God, what are your like... I saw THIS ... Oh, you dirty naughty person ... :)

I took photos and videos of your most passionate funs with adult content, and synchronized them in real time with the image of your camera.

Believe it turned out very high quality!

So, to the business!

I'm sure you don't want to show these files and visiting history to all your contacts.

Transfer $775 to my Bitcoin cryptocurrency wallet: 14VbGhtysr6wrNs7EhdKiS2NoMmMDBM8cn

Just copy and paste the wallet number when transferring.

If you do not know how to do this - ask Google.

My system automatically recognizes the translation.

As soon as the specified amount is received, all your data will be destroyed from my server, and the rootkit will be automatically removed from your system.

Do not worry, I really will delete everything, since I am 'working' with many people who have fallen into your position.

You will only have to inform your provider about the vulnerabilities in the router so that other hackers will not use it.

Since opening this letter you have 48 hours.

If funds not will be received, after the specified time has elapsed, the disk of your device will be formatted,

and from my server will automatically send email and sms to all your contacts with compromising material.

I advise you to remain prudent and not engage in nonsense (all files on my server).

Good luck!"

these people sent it to me too. I´m from Uruguay, and they are asking for bitcoins.

sent by this email:

"kmithholbmrt@78yahoo.com

they sent this:

Hello!

I have very bad news for you.

03/08/2018 - on this day I hacked your OS and got full access to your account []

On this day your account milka-[] has password:

So, you can change the password, yes.. But my malware intercepts it every time.

How I made it:

In the software of the router, through which you went online, was a vulnerability.

I just hacked this router and placed my malicious code on it.

When you went online, my trojan was installed on the OS of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a not big amount of btc to unlock.

But I looked at the sites that you regularly visit, and I was shocked by what I saw!

I'm talk you about sites for adults.

I want to say - you are a BIG pervert. Your fantasy is shifted far away from the normal course!

And I got an idea...

I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?).

After that, I made a screenshot of your joys (using the camera of your device) and glued them together.

Turned out amazing! You are so spectacular!

I'm know that you would not like to show these screenshots to your friends, relatives or colleagues.

I think $774 is a very, very small amount for my silence.

Besides, I have been spying on you for so long, having spent a lot of time!

Pay ONLY in Bitcoins!

My BTC wallet: 1FgfdebSqbXRciP2DXKJyqPSffX3Sx57RF

You do not know how to use bitcoins?

Enter a query in any search engine: "how to replenish btc wallet".

It's extremely easy

For this payment I give you two days (48 hours).

As soon as this letter is opened, the timer will work.

After payment, my virus and dirty screenshots with your enjoys will be self-destruct automatically.

If I do not receive from you the specified amount, then your device will be locked, and all your contacts will receive a screenshots with your "enjoys".

I hope you understand your situation.

- Do not try to find and destroy my virus! (All your data, files and screenshots is already uploaded to a remote server)

- Do not try to contact me (you yourself will see that this is impossible, the sender address is automatically generated)

- Various security services will not help you; formatting a disk or destroying a device will not help, since your data is already on a remote server.

P.S. You are not my single victim. so, I guarantee you that I will not disturb you again after payment!

This is the word of honor hacker

I also ask you to regularly update your antiviruses in the future. This way you will no longer fall into a similar situation.

Do not hold evil! I just do my job.

Good luck."

Here is another scam:

- - - -

Sent: Friday, November 23, 2018 3:25 AM

Subject:has been hacked! Change your password immediately!

Hello!

I have very bad news for you.

03/08/2018 - on this day I hacked your OS and got full access to your account []

On this day your account rob@imsysllc.com has password: []

So, you can change the password, yes.. But my malware intercepts it every time.

How I made it:

In the software of the router, through which you went online, was a vulnerability.

I just hacked this router and placed my malicious code on it.

When you went online, my trojan was installed on the OS of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a not big amount of btc to unlock.

But I looked at the sites that you regularly visit, and I was shocked by what I saw!

I'm talk you about sites for adults.

I want to say - you are a BIG pervert. Your fantasy is shifted far away from the normal course!

And I got an idea...

I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?).

After that, I made a screenshot of your joys (using the camera of your device) and glued them together.

Turned out amazing! You are so spectacular!

I'm know that you would not like to show these screenshots to your friends, relatives or colleagues.

I think $820 is a very, very small amount for my silence.

Besides, I have been spying on you for so long, having spent a lot of time!

Pay ONLY in Bitcoins!

My BTC wallet: 1GR7rJfntdcbfhKT1s33RDby4z5ex1ou4Z

You do not know how to use bitcoins?

Enter a query in any search engine: "how to replenish btc wallet".

It's extremely easy

For this payment I give you a little over two days (exactly 55 hours).

As soon as this letter is opened, the timer will work.

After payment, my virus and dirty screenshots with your enjoys will be self-destruct automatically.

If I do not receive from you the specified amount, then your device will be locked, and all your contacts will receive a screenshots with your "enjoys".

I hope you understand your situation.

- Do not try to find and destroy my virus! (All your data, files and screenshots is already uploaded to a remote server)

- Do not try to contact me (you yourself will see that this is impossible, I sent this email from your account)

- Various security services will not help you; formatting a disk or destroying a device will not help, since your data is already on a remote server.

P.S. You are not my single victim. so, I guarantee you that I will not disturb you again after payment!

This is the word of honor hacker

I also ask you to regularly update your antiviruses in the future. This way you will no longer fall into a similar situation.

Do not hold evil! I just do my job.

Good luck.

Here is another scam:

"From: niyi <amingo200@hotmail.com>

Date: 19 November 2018 at 16:21:32 GMT

Subject: Security Scam Warning. (your password:joerg1965)

Dear user of [@hotmail.com]!

I am a spyware software developer.

Your account has been hacked by me in the past.

I understand that it is hard to believe, but here is my evidence:

- I sent you this email from your account.

- Password from account @hotmail.com: [](on moment of hack).

The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296).

I went around the security system in the router, installed an exploit there.

When you went online, my exploit downloaded my malicious code (rootkit) to your device.

This is driver software, I constantly updated it, so your antivirus is silent all time.

Since then I have been following you (I can connect to your device via the VNC protocol).

That is, I can see absolutely everything that you do, view and download your files and any data to yourself.

I also have access to the camera on your device, and I periodically take photos and videos with you.

At the moment, I have harvested a solid dirt... on you...

I saved all your email and chats from your messangers. I also saved the entire history of the sites you visit.

I note that it is useless to change the passwords. My malware update passwords from your accounts every times.

I know what you like hard funs (adult sites).

Oh, yes .. I'm know your secret life, which you are hiding from everyone.

Oh my God, what are your like... I saw THIS ... Oh, you dirty naughty person ... :)

I took photos and videos of your most passionate funs with adult content, and synchronized them in real time with the image of your camera.

Believe it turned out very high quality!

So, to the business!

I'm sure you don't want to show these files and visiting history to all your contacts.

Transfer $804 to my Bitcoin cryptocurrency wallet: 34v8YS7DMKVhz3ZqMfHAvZge4JbDFM3Hiq

Just copy and paste the wallet number when transferring.

If you do not know how to do this - ask Google.

My system automatically recognizes the translation.

As soon as the specified amount is received, all your data will be destroyed from my server, and the rootkit will be automatically removed from your system.

Do not worry, I really will delete everything, since I am 'working' with many people who have fallen into your position.

You will only have to inform your provider about the vulnerabilities in the router so that other hackers will not use it.

Since opening this letter you have 48 hours.

If funds not will be received, after the specified time has elapsed, the disk of your device will be formatted,

and from my server will automatically send email and sms to all your contacts with compromising material.

I advise you to remain prudent and not engage in nonsense (all files on my server).

Good luck!"

Received this scam:

"I have bad news for you.

19/07/2018 - on this day I hacked your operating system and got full access to your account

It is useless to change the password, my malware intercepts it every time.

How it was:

In the software of the router to which you were connected that day, there was a vulnerability.

I first hacked this router and placed my malicious code on it.

When you entered in the Internet, my trojan was installed on the operating system of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a small amount of money to unlock.

But I looked at the sites that you regularly visit, and came to the big delight of your favorite resources.

I'm talking about sites for adults.

I want to say - you are a big, big pervert. You have unbridled fantasy!

After that, an idea came to my mind.

I made a screenshot of the intimate website where you have fun (you know what it is about, right?).

After that, I made a screenshot of your joys (using the camera of your device) and joined all together.

It turned out beautifully, do not doubt.

I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.

I think $715 is a very small amount for my silence.

Besides, I spent a lot of time on you!

I accept money only in Bitcoins.

My BTC wallet: 1H9bS7Zb6LEANLkM8yiF8EsoGEtMEeLFvC

You do not know how to replenish a Bitcoin wallet?

In any search engine write "how to send money to btc wallet".

It's easier than send money to a credit card!

For payment you have a little more than two days (exactly 50 hours).

Do not worry, the timer will start at the moment when you open this letter. Yes, yes .. it has already started!

After payment, my virus and dirty photos with you self-destruct automatically.

Narrative, if I do not receive the specified amount from you, then your device will be blocked, and all your contacts will receive a photos with your "joys".

I want you to be prudent.

- Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)

- Do not try to contact me (this is not feasible, I sent you an email from your account)

- Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.

P.S. I guarantee you that I will not disturb you again after payment, as you are not my single victim.

This is a hacker code of honor.

From now on, I advise you to use good antiviruses and update them regularly (several times a day)!

Don't be mad at me, everyone has their own work.

Farewell."

Here is another scam:

"Hello!

I have bad news for you.

19/07/2018 - on this day I hacked your operating system and got full access to your account []

It is useless to change the password, my malware intercepts it every time.

How it was:

In the software of the router to which you were connected that day, there was a vulnerability.

I first hacked this router and placed my malicious code on it.

When you entered in the Internet, my trojan was installed on the operating system of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a small amount of money to unlock.

But I looked at the sites that you regularly visit, and came to the big delight of your favorite resources.

I'm talking about sites for adults.

I want to say - you are a big, big pervert. You have unbridled fantasy!

After that, an idea came to my mind.

I made a screenshot of the intimate website where you have fun (you know what it is about, right?).

After that, I made a screenshot of your joys (using the camera of your device) and joined all together.

It turned out beautifully, do not doubt.

I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.

I think $761 is a very small amount for my silence.

Besides, I spent a lot of time on you!

I accept money only in Bitcoins.

My BTC wallet: 1H9bS7Zb6LEANLkM8yiF8EsoGEtMEeLFvC

You do not know how to replenish a Bitcoin wallet?

In any search engine write "how to send money to btc wallet".

It's easier than send money to a credit card!

For payment you have a little more than two days (exactly 50 hours).

Do not worry, the timer will start at the moment when you open this letter. Yes, yes .. it has already started!

After payment, my virus and dirty photos with you self-destruct automatically.

Narrative, if I do not receive the specified amount from you, then your device will be blocked, and all your contacts will receive a photos with your "joys".

I want you to be prudent.

- Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)

- Do not try to contact me (this is not feasible, I sent you an email from your account)

- Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.

P.S. I guarantee you that I will not disturb you again after payment, as you are not my single victim.

This is a hacker code of honor.

From now on, I advise you to use good antiviruses and update them regularly (several times a day)!

Don't be mad at me, everyone has their own work.

Farewell."

Here is one of the fake emails:

"I have bad news for you.

27/08/2018 - on this day I hacked your operating system and got full access to your account

On that day your account () password was:

It is useless to change the password, my malware intercepts it every time.

How it was:

In the software of the router to which you were connected that day, there was a vulnerability.

I first hacked this router and placed my malicious code on it.

When you entered in the Internet, my trojan was installed on the operating system of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a small amount of money to unlock.

But I looked at the sites that you regularly visit, and came to the big delight of your favorite resources.

I'm talking about sites for adults.

I want to say - you are a big pervert. You have unbridled fantasy!

After that, an idea came to my mind.

I made a screenshot of the intimate website where you have fun (you know what it is about, right?).

After that, I took off your joys (using the camera of your device). It turned out beautifully, do not hesitate.

I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.

I think $965 is a very small amount for my silence.

Besides, I spent a lot of time on you!

I accept money only in Bitcoins.

My BTC wallet: 1LwibmKAKu4kt4SvRLYdUP3aW7vL3Y78zL

You do not know how to replenish a Bitcoin wallet?

In any search engine write "how to send money to btc wallet".

It's easier than send money to a credit card!

For payment you have a little more than two days (exactly 50 hours).

Do not worry, the timer will start at the moment when you open this letter. Yes, yes .. it has already started!

After payment, my virus and dirty photos with you self-destruct automatically.

Narrative, if I do not receive the specified amount from you, then your device will be blocked, and all your contacts will receive a photos with your "joys".

I want you to be prudent.

- Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)

- Do not try to contact me (this is not feasible, I sent you an email from your account)

- Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.

P.S. I guarantee you that I will not disturb you again after payment, as you are not my single victim.

This is a hacker code of honor.

From now on, I advise you to use good antiviruses and update them regularly (several times a day)!

Don't be mad at me, everyone has their own work.

Farewell."

I also I have the identical one.

I received 5 separate emails identical to the above this week. I am not able to forward them to you though.