Basic scare scam. Mails sent via open mail proxies. Proxy hosters have been notified. Report added linking all known addresses used by the same scammer.

Basic scare scam. Mails sent via open proxies. Report added linking all known addresses used by the same scammer.

Basic scare scam. Mails sent via open proxies. Collective report linking all known addresses used.

phony sextortion

24 Sep 2023 21:35:55UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 31.152.226.230 (abuse report also sent to: abuse@cosmote.gr) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

Received: from [160.154.222.151] (unknown [160.154.222.151]) Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard at all for me to log in to your email account ([snip]). A week after that, I had already managed to effortlessly install Trojan virus to Operating Systems of all devices that are currently in your use, and as result gained access to your email. Herbey, I believe that now you finally start realizing how I could easily remain unnoticed all this while until this very letter... Well, there is still a way to settle this tricky situation in a peaceful manner: You will need to transfer $1380 USD to my account (refer to Bitcoin equivalent based on the exchange rate at the moment transfer), so once funds transfer is complete, I will straight away proceed with deleting all that dirty content from servers once and for all. ! Abstain from attempting to get in touch with police or any other security services. Moreover, don't even think of sharing this to you friends. Once I discover this (apparently, that is absolutely easy for me, taking in consideration that I have complete control over all systems you use) - kinky video will straight away be made public.

Received: from [2.90.131.12] (unknown [2.90.131.12]) .sa = tld Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard at all for me to log in to your email account [snip]. Herbey, I believe that now you finally start realizing how I could easily remain unnoticed all this while until this very letter... Well, there is still a way to settle this tricky situation in a peaceful manner: You will need to transfer $1380 USD to my account (refer to Bitcoin equivalent based on the exchange rate at the moment transfer), so once funds transfer is complete, I will straight away proceed with deleting all that dirty content from servers once and for all. ! Abstain from attempting to get in touch with police or any other security services. Moreover, don't even think of sharing this to you friends.  Once I discover this (apparently, that is absolutely easy for me, taking in consideration that I have complete control over all systems you use) -  kinky video will straight away be made public.

24 Sep 2023 20:55:40UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 181.234.193.92 (abuse report also sent to: admon.ip.telefonica@gmail.com) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 20:16:11UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 39.63.149.25 (abuse report also sent to: abuse.irt@ptcl.net) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 19:31:30UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 182.191.23.243 (abuse report also sent to: abuse.irt@ptcl.net) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 18:52:45UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 190.114.128.231 (abuse report also sent to: niellar@tpp.com.ar) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 17:15:22UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 102.22.184.26 (no abuse address found in whois databases) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 17:07:59UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 125.99.132.194 (abuse report also sent to: abuse@hathway.net) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 16:48:07UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 45.230.250.211 (abuse report also sent to: luis.ballon@televisoradelsur.com) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard

24 Sep 2023 16:47:24UTC: scammer contacted us by e-mail impersonating us (sending from our own domain) with threatening content (e.g. blackmail, sextortion, ...) demanding payment to bitcoin address below Mail originating from IP: 177.87.5.251 (abuse report also sent to: erinaldo@netcell.inf.br) Mail Subject: Payment associated to your account. First up to 512 characters of mail body: Hello. Unfortunately, I need to start our conversation with bad news for you. Around few months back I managed to get full access to all devices of yours, which are used by you on a daily basis to browse internet. Afterwards, I could initiate monitoring and tracking of all your activities on the internet. I am proud to share the sequence of how it happened: In the past I bought from hackers the access to various email accounts (today, that is rather a simple thing to do online). Clearly, it was not hard