"Account Compromised - Password Change Required" Sextortion Scam

The scammers are using this BTC account: 1Q2yu5awJd1Z3UJVw2VckeGoLs6TfSHFQR

Below is another scam being sent by cybercriminals to trick online users into sending them money but, please DO NOT. Do not be fooled because the email appears as if it is coming your account. It is, your email address was actually spoofed to make it appear so.

-- start of fake email --

"Be sure to read this message! Your personal data is threatened!

Tue 4/16/2019 5:59 AM

Hi, stranger!

I know the [password], this is your password.

As you can see, I logged in with your account. And I wrote you this message from your account.

If you have already changed your password, my malware will be intercepts it every time.

You may not know me, and you are most likely wondering why you are receiving this email, right?

In fact, I posted a malicious program on adults (pornography) of some websites, and you know that you visited these websites to enjoy

(you know what I mean).

While you were watching video clips,

my trojan started working as a RDP (remote desktop) with a keylogger that gave me access to your screen as well as a webcam.

Immediately after this, my program gathered all your contacts from messenger, social networks, and also by e-mail.

What I've done?

I made a double screen video.

The first part shows the video you watched (you have good taste, yes ... but strange for me and other normal people),

and the second part shows the recording of your webcam.

What should you do?

Well, I think $732 (USD dollars) is a fair price for our little secret.

You will make a bitcoin payment (if you don't know, look for "how to buy bitcoins" on Google).

BTC Address: 1Q2yu5awJd1Z3UJVw2VckeGoLs6TfSHFQR

(This is CASE sensitive, please copy and paste it)

Remarks:

You have 2 days (48 hours) to pay. (I have a special code, and at the moment I know that you have read this email).

If I don't get bitcoins, I will send your video to all your contacts, including family members, colleagues, etc.

However, if I am paid, I will immediately destroy the video, and my trojan will be destruct someself.

If you want to get proof, answer "Yes!" and resend this letter to youself.

And I will definitely send your video to your any 15 contacts.

This is a non-negotiable offer, so please do not waste my personal and other people's time by replying to this email.

Bye!"

-- end of fake email --

The criminals are usings these Bitcoin accounts:

1JCBEAd49tdYtKZKqoLCftfgujqum6L4aM

14tfS3yWL2cABhXVJZ97XRhuDXC69aWH6Y

1MxCjB1MJjqXwT8exG1tXBDkgrjc6kSjwW

1HNaDdKdmT2ePZSNwBj69px5UjPsWDq7M5

1EuUnZbqa4Wojzc3dAw9wowCoBwkkXHgdi

The cyber criminals are using these Bitcoin accounts:

12is8FD6Tx5QaLAosjh1KpwL1RDkhEwHC5

18cmvU7QoqDc8YKyyVnG2FU96qBtJZUCrr

Here is another scam:

"From: regascon@up.edu.ph

Date: 2 April 2019 at 3:17:12 PM GMT 8

To: <regascon@up.edu.ph>

Subject: Account compromised - Password change required (regascon@up.edu.ph)

Hey! I compromised your account and gained full access to it. As proof, I just sent this email from your account only (notice the from email address is regascon@up.edu.ph).

Let me tell you exactly how did this happen. You visited a compromised adult website sometime back, and you got infected, and then I observed every action of yours. It gave me access to all of your contacts, browsing history, your passwords, your webcam, and even your microphone.

I noticed you were trying to please yourself by watching one of those nasty videos, well my son, I recorded your actions (thanks to your webcam) and even recorded your screen (the video you were watching). Now, if you do nothing, then I will send this video to all of your email, social media and messenger contacts.

You have the option to prevent me from doing all of this. All you need to do is to make the transfer of $985 to my bitcoin address. If you don't know how to make the transfer, search google for "buy bitcoin." It is quick and easy. Trust me.

My bitcoin address to which you need to transfer is 18cmvU7QoqDc8YKyyVnG2FU96qBtJZUCrr

Once I receive the transfer (i.e payment), I will delete your video and everything I have about you, and you will never hear a word from me again. My malware will also self destruct itself once I get the payment. You have 48 hours to make the payment. As I mentioned earlier, I have full access to your system. Now I know that you have read the email, so your time starts now. If you are thinking about filing a complaint, save your efforts, since it will not result in anything. This email is untraceable, remember it been sent using your account only?

Don't think about sharing this message either because in that case, I will send your video to all of your contacts.

Bye!"

The scammers are using this BTC account: 16YkABmMCyK3UzhSV6Zt9h61kqU5KNUPe

They are also using the following:

12KTQobrHzd5CZXqqSM5GwXsyo5DE9X6Zm

19C8vfkoNG4VW4bJnp73xPWrddPZEdPqrz

The cybercriminals are using the following Bitcoin accounts:

19ZqyRME2EET1YX2ZWhiVoeeejdNAVPNzx

199rk9FyugLJ1QPNn6GK25QcBb7YC1ZM7n

1nEPcygJtERwdbyWcAWwENn9v866M2941

15a4KNHb27iFDnwjWdTQ1QwEhewt4B2cA1

1Ef5T5tJcBVm6qDFRxPFfdAnKhRJk16Vd2

1LZEr179WLGW41aFy57urFPcMm1HhpBJu9

1BYzErbsdaE954PJJz31iwqM9mKFmCdda4

1JeARV4JzjF4aTS1J3Q7DX2h4K1xX8kaJv

1Pr1Rhqvmz2m59DJQ7phs1bBP8iXFZ76bY