Basic scare scam. Mails sent via open proxies. Report added linking all known addresses used by the same scammer.

18 Jan 2024 07:19:59UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 178.91.53.229 (abuse report also sent to: abuse@telecom.kz) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

10 Jan 2024 12:28:02UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 5.251.249.118 (abuse report also sent to: abuse@telecom.kz) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun. I RECORDED YOU (through your camera) SATISFYING YOURSELF! After that I removed my malware to not leave any traces. If you still doubt my serious intentions, it only takes couple mouse clicks to share the video of you with your friends, relatives, all email contacts, on social networks, the darknet and to publish all your files. All you need is $1800 USD in Bitcoin (BTC) transfer to my account. After the transaction is successful, I will proceed to delete everything. Be sure, I keep my promises. You can easily buy Bitcoin (BTC) here: https://cex.io/buy-bitcoinshttps://nexo.com/buy-crypto/bitcoin-btchttps://bitpay.com/buy-bitcoin/?crypto=BTChttps://paybis.com/https://invity.io/buy-crypto Or simply google other exchanger. After that send the Bitcoin (BTC) directly to my wallet, or install the free software: Atomicwallet, or: Exodus wallet, then receive and send to mine. My Bitcoin (BTC) address is: 1ELed4R6FhJEL5pQQzP6PM9wFQbvHjuZng Yes, that's how the address looks like, copy and paste my address, it's (cAsE-sEnSEtiVE). You are given not more than 3 days after you have opened this email. As I got access to this email account, I will know if this email has already been read. Everything will be carried out based on fairness. An advice from me, regularly change all your passwords to your accounts and update your device with newest security patches.

24 Dec 2023 08:05:07UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 183.225.160.230 (abuse report also sent to: abuse@chinamobile.com) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

Basic scare scam. Mails sent via open proxies. Report added to linking of all known addresses used by the same scammer.

12 Dec 2023 06:45:37UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 213.230.93.205 (abuse report also sent to: ripe@bkm.uz) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

Sextortion scam attempt. Yay, you know how to spoof emails.

09 Dec 2023 07:38:35UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 81.88.198.137 (abuse report also sent to: office@transfer.kg) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

I purchased a domain from Njal.la a few days ago and set up catch all email forwarding for my new domain to be forwarded to my regular email address. I checked the spam folder for my main email account and saw a bunch of messages that were attempting to sextort me. The emails were sent to me by pearl@*thenewdomainipurchased*.net. I checked the headers did a search on the IP addresses that were in the header and they all came back as blacklisted for spam/abuse and were located in S. Korea and Uzbekistan. I attached a screenshot of the header. Red = my new domain name Blue = my personal email address Yellow = Dates, usernames and IP addresses

06 Dec 2023 14:32:59UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 95.57.254.124 (abuse report also sent to: abuse@telecom.kz) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

Basic scare scam. Mails sent via open proxies. New addresses added to report linking of all known addresses used by the same scammer.

06 Dec 2023 04:00:11UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 182.183.52.120 (abuse report also sent to: abuse.irt@ptcl.net) Mail Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! First up to 512 characters of mail body: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while ha

This is a common sextortion scam mail.