Just like the others. Source IP address from Russia is 27 times blacklisted for example on Barracuda, CBL, SOTBS etc.

Just like the others. The criminal lied to have my data and wants to send a large amount in dollars. I hope he will soon be punished. Source IP address is multiple blacklisted for example on Barracuda, CBL, SOTBS etc.

This extortioner uses the wallet [90e1422311] / 4998590c583f4fff with the bitcoins 14XMwrqXdhz6YnShUuW37dTrKmpMFbJDHL 1P55eXM8gxmwjSbqEpBWLBBvJQ7C1BmRH3_x000D_ This is obviously the biggest nonsense, paying with Bitcoin is anonymous so the scammer cannot know who the money came from (there is no sender). The story as described in the mail is therefore incorrect and is not based on truths.

Reported to the Internet Storm Center (https://isc.sans.edy) as part of the Sexploition campaigns of summer and fall of 2018

Hello, _x000D_ I am a spyware software developer. Your account has been hacked by me in the summer of 2018._x000D_ _x000D_ I understand that it is hard to believe, but here is my evidence (I sent you this email from your account)._x000D_ _x000D_ The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296)._x000D_ _x000D_ [etc. etc.]

I am a spyware software developer. Your account has been hacked by me in the summer of 2018. _x000D_ I understand that it is hard to believe, but here is my evidence (I sent you this email from your account). _x000D_ _x000D_ The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296). _x000D_ _x000D_ I went around the security system in the router, installed an exploit there. When you went online, my exploit downloaded my malicious code (rootkit) to your device. This is driver software, I constantly updated it, so your antivirus is silent all time. _x000D_ _x000D_ Since then I have been following you (I can connect to your device via the VNC protocol). That is, I can see absolutely everything that you do, view and download your files and any data to yourself. I also have access to the camera on your device, and I periodically take photos and videos with you.

Delivery-date: Thu, 20 Dec 2018 07:10:45 -0600 Received: from [94.25.171.118] (port=24808 helo=yahoo.jp)_x000D_ (envelope-from <Aaron314Smith@yahoo.jp>)_x000D_ id 1gZy68-001kVb-73_x000D_ Received: from rsmail.alkoholic.net [28.224.111.242] by mail.gimmicc.net with SMTP; Thu, 20 Dec 2018 07:57:41 -0500_x000D_ Received: from snmp.otwaloow.com [159.118.233.182] by smtp.mixedthings.net with LOCAL; Thu, 20 Dec 2018 07:56:31 -0500_x000D_ Received: from webmail.halftomorrow.com [184.231.3.117] by qrx.quickslick.com with LOCAL; Thu, 20 Dec 2018 07:41:05 -0500_x000D_ Received: from external.newsubdomain.com [152.95.148.248] by asx121.turbo-inline.com with ESMTP; Thu, 20 Dec 2018 07:37:37 -0500_x000D_ Received: from [13.69.58.179] by m1.gns.snv.thisdomainl.com with SMTP; Thu, 20 Dec 2018 07:20:42 -0500_x000D_ Message-ID: <C2A8E8D6.08994124@yahoo.jp>_x000D_ Date: Thu, 20 Dec 2018 07:20:42 -0500_x000D_ MIME-Version: 1.0_x000D_ Subject: kevin_x000D_ Content-Type: text/html;_x000D_ charset=iso-8859-1_x000D_ Content-Transfer-Encoding: base64

Received: from yahoo.jp (unknown [14.161.33.43]) by mx2.pub.mailpod3-cph3.one.com (Halon) with SMTP_x000D_ id 0c4c547e-fe58-11e8-a542-ec0d9a6ed98e;_x000D_ Wed, 12 Dec 2018 21:51:19 +0000 (UTC)_x000D_ Received: from qnx.mdrost.com ([51.13.230.1]) by relay.2yahoo.com with QMQP; Wed, 12 Dec 2018 16:33:21 -0500_x000D_ Received: from external.newsubdomain.com ([Wed, 12 Dec 2018 16:21:54 -0500])_x000D_ by webmail.halftomorrow.com with ASMTP; Wed, 12 Dec 2018 16:21:54 -0500_x000D_ Received: from [14.182.117.31] by nntp.pinxodet.net with ASMTP; Wed, 12 Dec 2018 16:14:01 -0500_x000D_ Received: from unknown (71.118.235.202)_x000D_ by mail.webhostings4u.com with ASMTP; Wed, 12 Dec 2018 16:08:36 -0500_x000D_ Message-ID: <B8A3C1CD.66480671@yahoo.jp>_x000D_ Date: Wed, 12 Dec 2018 16:08:36 -0500_x000D_ Reply-To: Bengt <Aaron482Smith@yahoo.jp>

Received: from webmail.halftomorrow.com [142.11.67.160] by m1.gns.snv.thisdomainl.com with ESMTP; Wed, 12 Dec 2018 01:26:44 -0500

spam email campaign used to threaten people and to trick them into transferring Bitcoins

Received an e-mail asking to depost money to this bitcoin account if not will realease information about my computer. This is the final mesage on the e-mail received: _x000D_ _x000D_ Hello, _x000D_ _x000D_ I am a spyware software developer. Your account has been hacked by me in the summer of 2018. _x000D_ _x000D_ ..........._x000D_ _x000D_ Transfer $994 to my Bitcoin cryptocurrency wallet: 1P55eXM8gxmwjSbqEpBWLBBvJQ7C1BmRH3 _x000D_ _x000D_ ......._x000D_ _x000D_ Since opening this letter you have 48 hours. If funds not will be received, after the specified time has elapsed, the disk of your device will be formatted, and from my server will automatically send email and sms to all your contacts with compromising material. _x000D_ _x000D_ I advise you to remain prudent and not engage in nonsense (all files on my server). _x000D_ _x000D_ Good luck!

The same old scam trick

I took photos and videos of your most passionate funs with adult content, and synchronized them in real time with the image of your camera. Believe it turned out very high quality! _x000D_ So, to the business! Im sure you dont want to show these files and visiting history to all your contacts._x000D_ _x000D_ Transfer $905 to my Bitcoin cryptocurrency wallet: 1P55eXM8gxmwjSbqEpBWLBBvJQ7C1BmRH3

Hello, _x000D_ I am a spyware software developer. Your account has been hacked by me in the summer of 2018._x000D_ _x000D_ I understand that it is hard to believe, but here is my evidence (I sent you this email from your account)._x000D_ _x000D_ The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296).

Attempt to blackmail after claim of hacking my local infra.