The "Your Device is Infected with A Trojan Virus" Blackmail Scam

"From: hscherer@piu.edu <hscherer@piu.edu>

Sent: Wednesday, September 4, 2019 9:08 PM

Subject: Your device was infected. Please take the action.

Hi, I'm a hacker and programmer, I got access to your account hscherer@piu.edu.

Your device was infected with my private malware, because your browser wasn't updated / patched,

in such case it's enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more - Google: "Drive-by exploitH".

My malware gave me full access to all your accounts, full control over your OS and it was possible for me to spy on you over your webcam.

I collected all your private data, recorded few videos of you (through your webcam) and I RECORDED YOU SATISFYING YOURSELF!!!

I can publish all your private data everywhere, including the darknet, where the very sick people are and the videos of you,

send them to your contacts, post them on social network and everywhere else!

Only you can prevent me from doing this and only I can help you out, there are no traces left,

as I removed my malware after my job was done and this email(s) has been sent from some hacked server...

The only way to stop me, is to pay exactly 703$ in bitcoin (BTC).

It's a very good offer, compared to all that HORRIBLE sh**t that will happen if you don't pay!

You can easily buy bitcoin on the next services: paxful, coinbase or check for bitcoin ATM near you, or Google for other exchanger.

You can send the bitcoin directly to my wallet, or create your own wallet first here: blockchain com, then receive and send to mine.

My bitcoin wallet is: 1MYJjmYScwmFfthAQNXWb5fhNMRVcAiZd

Copy and paste it, it's (cAsE-sEnSEtiVE)

You got 72 hours time.

As I got access to this email account, I will know if this email has been read.

If you get this email multiple times, it's to make sure that you read it, my mailer script is configured like this and after payment you can ignore it.

Please do not reply to this email. The sender's address is automatically generated to ensure that this email is received.

After receiving the payment, I remove all your data and you can life your live in peace like before.

Next time update your browser before browsing the web!"

Here is another scam.

They are using this Bitcoin account: 16L5j1Jrn7b8amS6eDpWtz2hBzLe1SAEKd

I just received an email yesterday and it scares the crap out of me. I really hope you are right about this being a scam. I’m not sending any money. My email read very similar to yours about. Contacts being notified because of video that was recorded!

Here is another scam:

"From: <jd_malachi@hotmail.com> copy to <tigerlawyer@onebox.com>

Sent: Thursday, March 7, 2019 6:25 AM

Subject: last digits your numberXxx15 I steal you privacy.

For copy to Detective

As you may have noticed, I sent last digits your phonenumberXxx15. This means that I have full access to your device and accounts. I've been watching you for a few months now.

The fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control your devices. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware? @nswer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing h0w you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.

With one click of the m0use, I can send this vide0 to all your emails and contacts^. If you want to prevent this, transfer the amount of $704 to my bitcoin* @ddress (if you do not kn0w how to do this, write to Google: "Buy Bitcoin"). My bitcoin @ddress (BTC Wallet) is: 13FDEoFSZFYWmPd64aEB6pU1tJJCC7jb7N

After receiving the payment, I will delete the video and you will never hear me again. I give you 48 hours to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes.

If I find that you have shared this message with someone else, the video will be immediately distributed."

The scammers are using this Bitcoin Wallet Address: 1D6RfZPhNu7f5rNgY8L1zCAjKaJszF2LZ

They are using BTW: 13imy3S2nBKu5itBiik7ZAEz5KsDGS6FhG

The scammers are using this email address: 18pKQ88ZpatLYmyeKpuCFwvRFcjHjwVB2u

Kust got one of these from a zhg23101@gmx.net:

"Your device is infected with a trojan virus and now have your private info out of your device.

It previously was installed on a porn video web page after which you've selected the video clip, your device was infected by the virus and gathered all your contacts. Then, your camera started to record you soloing and also recorded videos that you have seen.

Well, If you ever wish us to wipe out all your details that we have got, give us 1,800 USD in btc to the below address (if you don’t know this, search “how to buy btc” in Google) .

1GJpCgFzGEFn3YK4PKn87q6auweN3zM4Sw

(It is cAsE sensitive, so copy and paste it)

You have 24 hours after receiving this message in order to make the payment. If I don’t get the payment, I will send the evidence to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immediately."

Here is another scam:

"Security Notice. [] was hacked! Change your password now!

Dear user of !

I am a spyware software developer.

Your account has been hacked by me in the summer of 2018.

I understand that it is hard to believe, but here is my evidence - I sent you this email from your account.

The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296).

I went around the security system in the router, installed an exploit there.

When you went online, my exploit downloaded my malicious code (rootkit) to your device.

This is driver software, I constantly updated it, so your antivirus is silent all time.

Since then I have been following you (I can connect to your device via the VNC protocol).

That is, I can see absolutely everything that you do, view and download your files and any data to yourself.

I also have access to the camera on your device, and I periodically take photos and videos with you.

At the moment, I have harvested a solid dirt... on you...

I saved all your email and chats from your messangers. I also saved the entire history of the sites you visit.

I note that it is useless to change the passwords. My malware update passwords from your accounts every times.

I know what you like hard funs (adult sites).

Oh, yes .. I'm know your secret life, which you are hiding from everyone.

Oh my God, what are your like... I saw THIS ... Oh, you dirty naughty person ... :)

I took photos and videos of your most passionate funs with adult content, and synchronized them in real time with the image of your camera.

Believe it turned out very high quality!

So, to the business!

I'm sure you don't want to show these files and visiting history to all your contacts.

Transfer $775 to my Bitcoin cryptocurrency wallet: 14VbGhtysr6wrNs7EhdKiS2NoMmMDBM8cn

Just copy and paste the wallet number when transferring.

If you do not know how to do this - ask Google.

My system automatically recognizes the translation.

As soon as the specified amount is received, all your data will be destroyed from my server, and the rootkit will be automatically removed from your system.

Do not worry, I really will delete everything, since I am 'working' with many people who have fallen into your position.

You will only have to inform your provider about the vulnerabilities in the router so that other hackers will not use it.

Since opening this letter you have 48 hours.

If funds not will be received, after the specified time has elapsed, the disk of your device will be formatted,

and from my server will automatically send email and sms to all your contacts with compromising material.

I advise you to remain prudent and not engage in nonsense (all files on my server).

Good luck!"