****************************************************
From: DarkWeb TM <info@101kod.ru>
Subject: [SPAM] ###@yourdomain.ca has been hacked! Change your password immediately!
Date: November 28, 2018 at 2:16:36 PM PST
To: " ###@yourdomain.ca" < ###@yourdomain.ca>
Reply-To: DarkWeb TM <alexgen@tuta.io>
Hะตllo!
I hะฐvะต vะตry bะฐd nะตws for you.
03/08/2018 - on this dะฐy I hะฐัkะตd your OS ะฐnd got full ะฐััะตss to your ะฐััount ###@yourdomain.ca
So, you ัะฐn ัhะฐngะต thะต pะฐssword, yะตs.. But my mะฐlwะฐrะต intะตrัะตpts it ะตvะตry timะต.
How I mะฐdะต it:
In thะต softwะฐrะต of thะต routะตr, through whiัh you wะตnt onlinะต, wะฐs ะฐ vulnะตrะฐbility.
I just hะฐัkะตd this routะตr ะฐnd plะฐัะตd my mะฐliัious ัodะต on it.
Whะตn you wะตnt onlinะต, my trojะฐn wะฐs instะฐllะตd on thะต OS of your dะตviัะต.
ะftะตr thะฐt, I mะฐdะต ะฐ full dump of your disk (I hะฐvะต ะฐll your ะฐddrะตss book, history of viะตwing sitะตs, ะฐll filะตs, phonะต numbะตrs ะฐnd ะฐddrะตssะตs of ะฐll your ัontะฐัts).
ะ month ะฐgo, I wะฐntะตd to loัk your dะตviัะต ะฐnd ะฐsk for ะฐ not big ะฐmount of btั to unloัk.
But I lookะตd ะฐt thะต sitะตs thะฐt you rะตgulะฐrly visit, ะฐnd I wะฐs shoัkะตd by whะฐt I sะฐw!!!
I'm tะฐlk you ะฐbout sitะตs for ะฐdults.
I wะฐnt to sะฐy - you ะฐrะต ะฐ BIG pะตrvะตrt. Your fะฐntะฐsy is shiftะตd fะฐr ะฐwะฐy from thะต normะฐl ัoursะต!
ะnd I got ะฐn idะตะฐ....
I mะฐdะต ะฐ sัrะตะตnshot of thะต ะฐdult sitะตs whะตrะต you hะฐvะต fun (do you undะตrstะฐnd whะฐt it is ะฐbout, huh?).
ะftะตr thะฐt, I mะฐdะต ะฐ sัrะตะตnshot of your joys (using thะต ัะฐmะตrะฐ of your dะตviัะต) ะฐnd gluะตd thะตm togะตthะตr.
Turnะตd out ะฐmะฐzing! You ะฐrะต so spะตัtะฐัulะฐr!
I'm know thะฐt you would not likะต to show thะตsะต sัrะตะตnshots to your friะตnds, rะตlะฐtivะตs or ัollะตะฐguะตs.
I think $742 is ะฐ vะตry, vะตry smะฐll ะฐmount for my silะตnัะต.
Bะตsidะตs, I hะฐvะต bะตะตn spying on you for so long, hะฐving spะตnt ะฐ lot of timะต!
ะ ะฐy ONLY in Bitัoins!
My BTะก wะฐllะตt: 1N2ZUgYg8GtcJfcYnCgYZnixnBaoLLw71J
You do not know how to usะต bitัoins?
Entะตr ะฐ quะตry in ะฐny sะตะฐrัh ะตnginะต: "how to rะตplะตnish btั wะฐllะตt".
It's ะตxtrะตmะตly ะตะฐsy
For this pะฐymะตnt I givะต you two dะฐys (48 hours).
ะs soon ะฐs this lะตttะตr is opะตnะตd, thะต timะตr will work.
ะftะตr pะฐymะตnt, my virus ะฐnd dirty sัrะตะตnshots with your ะตnjoys will bะต sะตlf-dะตstruัt ะฐutomะฐtiัะฐlly.
If I do not rะตัะตivะต from you thะต spะตัifiะตd ะฐmount, thะตn your dะตviัะต will bะต loัkะตd, ะฐnd ะฐll your ัontะฐัts will rะตัะตivะต ะฐ sัrะตะตnshots with your "ะตnjoys".
I hopะต you undะตrstะฐnd your situะฐtion.
- Do not try to find ะฐnd dะตstroy my virus! (ะll your dะฐtะฐ, filะตs ะฐnd sัrะตะตnshots is ะฐlrะตะฐdy uploะฐdะตd to ะฐ rะตmotะต sะตrvะตr)
- Do not try to ัontะฐัt mะต (you yoursะตlf will sะตะต thะฐt this is impossiblะต, thะต sะตndะตr ะฐddrะตss is ะฐutomะฐtiัะฐlly gะตnะตrะฐtะตd)
- Vะฐrious sะตัurity sะตrviัะตs will not hะตlp you; formะฐtting ะฐ disk or dะตstroying ะฐ dะตviัะต will not hะตlp, sinัะต your dะฐtะฐ is ะฐlrะตะฐdy on ะฐ rะตmotะต sะตrvะตr.
ะ .S. You ะฐrะต not my singlะต viัtim. so, I guะฐrะฐntะตะต you thะฐt I will not disturb you ะฐgะฐin ะฐftะตr pะฐymะตnt!
This is thะต word of honor hะฐัkะตr
I ะฐlso ะฐsk you to rะตgulะฐrly updะฐtะต your ะฐntivirusะตs in thะต futurะต. This wะฐy you will no longะตr fะฐll into ะฐ similะฐr situะฐtion.
Do not hold ะตvil! I just do my job.
Good luัk.
***********************************************************************
While there are actually ways to hijack your computer and possibly do all the things they said they are doing , THIS IS NOT ONE OF THEM !
This is simply a scam to make you send them money for nothing. Yes some people fall for it because they do not understand enough about the technology involved.
HOW TO SPOT A FAKE/ SPAM ATTEMPT.
1. Request is received by eMail and not on the infected computer directly.
2. it refers to an old date - nobody waits that long
3. NO secrets are revealed . There are simply suggestions that you did something morally reprehensible that you may not want to be made public.
4. Subject line of eMail says : your eMail was hacked while the content talks about your OS ( Operating system of your computer ( Ie.: Windows. Apple OS)
5. No actual passwords are being revealed to proof that they really "got the dirt on you".
6. You have a good and current Virus and Spam Ware program on your computer ( i.e. Bitdefender, Avast, AVG, McAffee, Norton etc.) and that one did not say anything about illegal access.
WHEN DO I NEED TO BE CONCERNED?
1. You find a message on your screen that your hard drive has been encrypted and you need to pay to get it back AND your hard drive is really encrypted
This means you either have no professional Virus/Malware Software installed and they planted an encryption program, likely by clicking on a link of an infested eMail or by downloading a FREE program from the internet that you should not have.
2. Your eMail was really hacked and they provide your eMail address and the password you actually use.
This does not happen a lot because if they really did they would use your eMail address to send out infected mails to all your contacts that hopefully click on the attachment and catch a nasty Malware that then plants a TROJAN, a Keystroke recorder or a software that encrypts their hard drive. It would make no sense to tell you that they are using your eMail account to send mails as you would stop that immediately.
Do the following from now on:
1. Be aware that these types of extortion attempts or PHISHING attempts are out there. Millions are being sent every hour. Some will find their way in your inbox. Always question the validity.
2. Never click on ANY attachments you are not sure if the sender intended to send them ( see above about hacked eMail accounts) Send a request back and ask if they really sent you something.
3. Install a good Anti-Malware/ Virus Program on your computer. Even the free version of a good program is better than what Microsoft provides with Windows.
3. Update all your passwords to be "complex" with at least 8 characters including Capitals, Numbers and Symbols. See this earlier blog for a system of complex passwords you'll never forget.
4. Use 2-Factor Authentication on ALL Mission Critical Accounts ( eMail, Banks , Social Media etc.)
These precautions together with a healthy dose of suspicion and a less itchy trigger finger for clicking will keep you reasonably safe.
