KatsBits Community

SCAM WARNING - Bitcoin Sextortion & Blackmail Scams

kat · 7 · 13659

0 Members and 1 Guest are viewing this topic.

Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
Bitcoin Sextortion scams and blackmail

The following bitcoin addresses (cf. below) are linked to an increasing number of 'sextortion' scams, essentially electronic or online blackmail that purports to be from someone, typically claiming to have hacked the recipients email address to send an often self-addressed 'spoofed' message, with threats that various adult websites have been hacked and malware placed to hijack the users webcam to record compromising videos, the threat then being the captured materials release to the public if payment is not sent to a bitcoin address included in the message, amounts often in excess of $1000's of dollars (USD).
Quote
It's important to note sextortion scammers acquire target addresses not from compromised websites as suggested by the scammer, but from lists of breached email accounts available online - breaches of gaming sites that end up being sold online for example, which is why it's always a good idea to change passwords when notified of such events.

Typical sextortion email - message body may be text, an image or combination (the latter making it additionally annoying to type the bitcoin address accurately), with poor grammar, spelling and punctuation. Unlike other sextortion or money scams, Western Union money grams for example, the anonymous nature of bitcoin makes these scams particularly troublesome due to the difficulty in tracking down the scammers - at present the only effective means to combat these scams is to shine a light on the addresses being used, even then there are always exchanges willing to process funds sent to them regardless (see below for more resources/info).

Quote
Hello!
 
I'm a programmer who cracked your email account and device about half year ago. You entered a password on one of the insecure site you visited, and I catched it. Your password from {users email address} on moment of crack: {password or other PII} Of course you can will change your password, or already made it. But it doesn't matter, my rat software update it every time. Please don't try to contact me or find me, it is impossible, since I sent you an email from your email account.
 
Through your e-mail, I uploaded malicious code to your Operation System. I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources. Also I installed a rat software on your device and long tome spying for you.
 
You are not my only victim, I usually lock devices and ask for a ransom. But I was struck by the sites of intimate content that you very often visit. I am in shock of your reach fantasies! Wow! I've never seen anything like this! I did not even know that SUCH content could be so exciting! So, when you had fun on intime sites (you know what I mean!) I made screenshot with using my program from your camera of yours device. After that, I jointed them to the content of the currently viewed site. Will be funny when I send these photos to your contacts! And if your relatives see it? BUT I'm sure you don't want it. I definitely would not want to ... I will not do this if you pay me a little amount. I think {amount USD} is a nice price for it!

I accept only Bitcoins. My BTC wallet: {bitcoin address}
 
If you have difficulty with this - Ask Google "how to make a payment on a bitcoin wallet". It's easy. After receiving the above amount, all your data will be immediately removed automatically. My virus will also will be destroy itself from your operating system. My Trojan have auto alert, after this email is looked, I will be know it!

You have 2 days (48 hours) for make a payment. If this does not happen - all your contacts will get crazy shots with your dirty life! And so that you do not obstruct me, your device will be locked (also after 48 hours) Do not take this frivolously! This is the last warning! Various security services or antiviruses won't help you for sure (I have already collected all your data). Here are the recommendations of a professional: Antiviruses do not help against modern malicious code. Just do not enter your passwords on unsafe sites!

I hope you will be prudent. Bye.

Bitcoin Scam Addresses/ID's
(see below posts for more bitcoin addresses)
  • 19eXNvqfdK7w8NVX1Db5o6GBYR1tcpWTKv
  • 1BtfPsKpk13fReZsTkVotBffkS63eN6L8p
  • 1CNEPy79uNLJ9o6DQXD44CsHjGDgpCbTL2
  • 17WhVHdWCW3yNNAo4LXsPRpTCnhN8wVtG8
  • 1GnGGkm4kRjhU71mZSUCEkkQFNbCpGAneG
  • bc1qgnl94qvlfeyd39xfydcgh8lwrrmarves2c83l5
  • bc1qv0anh9jxck5vvc3uk9pv6z5kq95rx7gnsny3vm
  • 13yQcMFQSf7ixzJrNceCDL4E1jVHEVqrcY
  • bc1qujdfkefrs0p8423uns7qercgqk6ys5pp8eym5r
  • 1Pp5DTCTRSzoFyaHbrSEWGDWZZRp3rMsWv
  • bc1qvumapzgx0adq9qphwlawhyuftxmecxdmxj8lsz
  • bc1qvz5hn4ylpktu2k5kt8cn3nyx6nnhzslh9lqx2c

What to do if scammed by bitcoin fraud
The following resources can be used, depending on location and jurisdiction, to report sextortion bitcoin scams;
  • https://www.bitcoinabuse.com/ - database that keeps track of user submitted bitcoin scams, search for and report bitcoin abuse including sextortion emails (be sure to clear personal information when submitting a report).
  • https://haveibeenpwned.com/ - database that keeps track of compromised account data, usually in the form of drops from breached websites.
  • Report the scheme to the local authorities, Action Fraud (https://www.actionfraud.police.uk/report-phishing) in the UK for example - availability may vary (optional).
  • Depending on mail client Header information may be available that can be used to report abuse to mail provider (optional).


Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
Additional Bitcoin Scam Addresses
  • bc1q75p32fvf603grheeeawdl3skz2m6lhpfz9xk3r
  • bc1qdnjffh9tpmphuex2pknqg3yeq4g0xvfm2ag53w
  • 1ChY91KYRAabrs9635MPYR3ArByVJTSTdo
  • 1LqSNBE9rcvypxXF8fiBE88YenJsRfvsEZ
  • 1MSafx9aRzRybiqgGJnH1Ah4EJz5usuSxy
  • 12aJgkbT9ozAZnVwiKDg76FNpS6FcCeVvS
  • 1MQj3FSm2kcentMBiDfNZjAMP4VYfQRriC
  • 1DxrzqzwqDBw1jcHUZv1Qb9eFFfYzdiXCY
  • bc1qac4ju5knvqu26tx0lpajhv6swrz5xdy6q4yu7t
  • 18JafCUSR3JWJuxbSH9Wp4AUizzTwkZz9D
  • 1Lt2Ns6FEPTPHA6pENS1Rhym1KAt43FFUp
  • 1P46q6VQNgBjZRWrcgQdaZHB4BHrjxBzcB
  • 1CRYYUGRWWdMFaaEHYJBwL1zwqgpQPdgeK
  • 18cZdbWnhjRcUPGZgjRgsXFzLDwYHX7EuA
  • bc1q549rwxx67lhhhfn4y9073t4pyah539pw09cf9a
  • 14YLQA98RNJX22W2Prmc7PRQNf6QQf1B1D
  • 1KRBGGiiVLq5zNkBtp5LYnKWtD3tSKdMSJ
  • bc1qnuks0l6sulm5dek8n0g32n49t3pcfajyml926r
  • 1PNWAfqoNQhTR2jCpcSPL6P5XrCxCofqB3
  • 1A9A9LAoMRUu9xBMYWgutcKVWiciuWkw6Z
  • 1MRUpyvGTeJ1pyhmWFLvspjc1AHwKRbrxR
  • bc1qgc7epqfh755j33pudjckx399st8vk8dnksq2d2
  • 19AEV6b6SMVTByErnpaQUDCUWK5cN8gYqh
  • 1Esuu72EhuPPLcKBvbNjGNnrP23dnWh3tF
  • 1M6WbcKrAu3WtyTSUz1hk4eaHRD3oUNKtp
  • 12nEVuGNtRFMVjeVmLtD4nt2sHX68S47yH
  • bc1qwunkmvszkl4jm73n0t9xf0hs6h5yphl354tn09
  • 1EPeB1Ea1v1XAg7L2yFFuhifFsX1sswDKG
  • 18GaQVHRKASCZu9B9oH1gnHENfSHL352G8
  • 1P9V9BQ83wdEXGm3KmGxXMAdCVeXSd5W3Z
  • bc1qac4ju5knvqu26tx0lpajhv6swrz5xdy6q4yu7t
  • 17vx3UtYCyuginAvHVEGnFFT1fLvKJpqEY
  • bc1qac4ju5knvqu26tx0lpajhv6swrz5xdy6q4yu7t
  • 1Lg7uq1QxncrvMiF6rog2C63QMLi6nAFgE
  • 1Kb1DScy1ZHanxvTD8WK62RTPt6GmynmDn
  • bc1q549rwxx67lhhhfn4y9073t4pyah539pw09cf9a
  • 19yaJM8qhsyXnwoQP7zQbMkqJStoMYxPmE
  • bc1qac4ju5knvqu26tx0lpajhv6swrz5xdy6q4yu7t
  • 1H9neDfDv92GiNfezCqnvzrCqxDg5LaWpx
  • 15WXLWo8mH79dJiUiHJ7UMgrpXD33ky9XU
  • 1P5vLEEuGawo33WLs3pVdxTuyjqt7Ymf9C
  • 1Q3bj3y63wqXPGcsXhiC9N1YbYhF5euBBY
  • 1KuyExEtLfhM1qzzgGLdTKZvquMH6y6Kss
  • 15mSqySLsJ8MZqNQ7RfXiq54HGyt7uh3Cn
  • 17EhWWWdJMnVvgDpN3vHhTgXG19Zx4dKQ7
  • 18bSTrufLfuvHwS7JYuF626MBGULSmxTgR
  • bc1qgc7epqfh755j33pudjckx399st8vk8dnksq2d2
  • 1GwaVJAdZHQEJFdD1tpDw4KvYas1XAJyic
  • 16rGyggURQvJw6RMwigDVzEGjjoCC5fZFP
  • 1AsRkzQSorZAc66fdXof9NHTNJdU4T8nC8
  • bc1qgmm9gj2dvavv5kyq2u2xa6khh2xyrhd3262uyp
  • 1GdVKgGS8iXeSSrynTfHyDugrpchwVDmdZ
  • 1GyYujUxs2eJpECpYu3Ns6F4RvZqsp8NT6
  • 1dEfpd1sjZTCkjhb9DD5gnzMiiQYoXZhE
  • 1FmKjxWybWDuoD17pKvKaVH81gb5HGBpyP
  • 1Jv4gYRkCiDQqBQvdmDW9c2Dqwg1pYfn6y
  • 12nEVuGNtRFMVjeVmLtD4nt2sHX68S47yH
  • bc1qgc7epqfh755j33pudjckx399st8vk8dnksq2d2
  • 35wTvTsP2cwphbQH4uxw4Jm1dS6o1gKRpa
  • 1DxxqP5uWPWsGgfaYwJ47wRYp1NH9tj1G2
  • 1GfBNY2DfHRQRuCHLRP1vNFUjGGLCtgTab
  • 3NAsdbK86jHSJGNKicr1GGxspkSEKxxUoU
  • 1Dmh5VKGQcxThNADmmYewCdq3fxKxgkrMr
  • 1LrQJeowKsXbuPSJWVnVqz3Y79EftJSPt7
  • 1BJTJBMtMzXYqZP2egjkMrbPRVbyqsKRtg
  • 12gHyoR78pjHpfueWUYyMudnwNMc6NGEPY
  • 35XYj6AywQ5e8KQTzfVBKzdnJyR6dKCNwy
  • 367ZpPL8MzZ87kbMQVMoUt662RDwUuH7Hq
  • 3CNzUwyRUS7etLPoWk3bEsAS3CKh5bzuFm
  • 3EEQ4EmY2gxy1pV18L2yLJU2wRxMJGgGqf
  • 16trAbrqfAkfpN2zoJ2gQQdsYebkspgHpQ
  • 13jKLyAFhjVRiWyg1TTPVjweFBAyUyBiy8
  • 19hk5wJPDCSV6KexJPbgz28TdECKLnXgFt
  • 1B4h63LjY8ZZBLuk1r5s6HkeVRV5W6uRE2
  • 1CiqhHbPPNKHyX9AiMBFKp6ydxcM5WJyBW
  • 1C2ek9b57xdVY9rPUaUnczxN5vGjVS8EhA
  • 1ND3JTwUaYWhDjTuaAK8idmpmuRQGqAkB1
  • 18YFLJHGufQQukMFRkJJJiz51mp21qN96p
  • 1pSw6eh5GoWtBrETzPbM36DGxc6Tes5Mp
  • 1P3eUgQzL12tDo2oh9csyo7HFxLer8vJsG
  • 1LRzCRoxaQ6AiAR8vEyUody3Aw235JXgRL
  • 1EhjD4hzLpwuHVu52ScHTJASqPdkC6SD4
  • 1EtgSZtpMMY3AEbAoctNYfRYaY3NXrZbAj
  • 1DnDfzKAjTYWcn6nCVfkXLh5RRaGBUZ7nE
  • 1HmvPgkmdkaSr6R1KA31fW8kpw1EvZJo9H
  • 16bHkVFULVmxTGVi2XKpwzkt5KrRnThzPg
  • 1r8KDQsoFUWLdV1D2L1vc66YibNDrrYys
  • 1LV8rSHsXYQ9JWUM4LRAGywH8RA6DXH6A7
  • 17YJKh4TNBDrgFKfbjbQHCGEmZH8uvFoVp
  • 1LrBGezKti4m2cov7CKuurLnCfQvjp2o1A
  • 1771s891APz1wNKdn5fe3Vknmf5pN18cWu
  • 1mxMw4vzaKZfqXeAqFP2aqB5QmJFRDKZv
  • 1JaSs2bTAYVbj6jaqD5Mjfs8gSLYgvYCrK
  • 1B33LTohL4pWrZsjSpzLYjZ6WorWkwnoGE
  • 1LzA9kzQkGDTYSfbbLE8gK5RAJ5ke32ntC
  • 1GvxuP9puQCMNQvEKuwNrLeGwp9LWV4822
  • 1Bg62SYMjRfcSVaUM9VoAcr8Fy6bX2qQbN
  • 1MW4maqRuqi62YiRNMaBiHT65WJJMEAvQw
  • bc1qgehlvvultu8f0ug29xzh9jwsc4f8gdcmfsfd97
  • 1HPaBSaYhPRJpfpL7rN36fSWmv8YR6pgzs
  • bc1qh6atnurhs33s9x4ytuldq9yzxgyf6xjs4nslr4
  • 1HB6CPkMo43UmZCNR7mmReXqpDNtfEg85L
  • bc1q8xgqedexwya485u4w3cp749fzurcjf2xd2hhz6
  • 12vuAcRSYDWuGHEVNVtQaEjBCBevps3ZcE
  • bc1qq7r88u5qe846v0x95tp9kj6lz5p8nrqav4j3mr
  • 1PQfyHsqnU1mpQHgbgNsbAxDLw5u2mgqgb
  • 1DKFpsoAS5dmKgo9YHygAiRJEJanwZmdWy
  • 1Chh8EcWosTHo7LyVhkoDsyhVBmGDPnqNo
  • bc1qphm3r595pqez0zqz2qyz6mxh724guezrsp72qr
  • 1Chh8EcWosTHo7LyVhkoDsyhVBmGDPnqNo
  • 1E2dQnAdZfo19EuPvSK152TPscXTqxZQ2H
  • 1ArrA3D7zbPnGmNXTiDu829fEwzZKFoXG
  • 14dbcD3gXf5eHkYuA2PYf2nakQ5B7hVqHj
  • 1PUwf7ybLvvKLJ8NpWeaEChz4WFQtnC2Gx
  • 1GkrqGsN3ZpusEqQQqESZ6h2Wxdo6AW8xc
  • bc1qnzc90y3upvdsd7kmn98kl5w8f5hs90ajyvcatw
  • bc1qj2mn7zgmjgv3xtumn2ygnnhvpdfppef3mg03qy
  • bc1qud5hj5wnuzyxwpnar6grc4z500z4kwpsemx833
  • 1B2pH6Q3oakYf6MJvxDasVw5yjNbD4S3yD
  • 15DMMwLTqV4RmYpJZDoNUZvzNikX1m6j4R
  • bc1qv0q5vgax67f0c7muamm07syeurhtz3t2lchgy4
  • 1KD14nfrgjNCd5RYyb7wGKWsHxYG1cn3zK
  • 1KZYRM7FhRBp4uS2ucMtJeFTeZXYsvhVfy
  • 1Q7oKyU8HWEZk2RhP9AapqdnuCy9p3TUAq
  • 1JfnsTBvRQYNvzxYFTQBtEUgojmPy2vd6F
  • 17BSLhc597GybEuZ4DyFpdtceY3Moi3nWo
  • 19Ya5oeV6zqsHa9TSyurpeF1LpYJqm84Yv
  • 1N5J73F3gYPgZ8zkbnUhoryrYjQcqsA7St
  • bc1qxv34ptq9rglp3wd42zdkfjx35dmdrqw36r7w0f
  • 1NYCdN9eBXhT4tPSpu4EhpjC9gHXLzipLL
  • 1DRNo5xnNCHtBfyFapVL8NT1cpsyju7NJ4
  • bc1qhzq0cdac5v8ecuverqctv3lxa04qf0g4jxh24r
  • 15U48PR1KhU3rWxhQKfNxXhUDxfBhQsTor
  • bc1q272edu0v6el2kmxcxnl3k6yq9zqfhdggl3dumr
  • 1HiTbewnp8XNHy2zdeYQTG3NAicRG7CzuT
  • bc1qznsh6ahq9h05pgekemygh7mdvc4egkvfvf3ltc
  • 1LFsx9dxQxJWrXu62MTaVRtsH9Nz8D6SB5
  • 1EeaB9n9RKCsxbzzmVNNPbcu9Lrq89Bm4Y
  • 1BwDYXp1YCa2NLfGiF5Gfnkmgf61MqupHb
  • 1BwDYXp1YCa2NLfGiF5Gfnkmgf61MqupHb
  • 1P8zGx51BpyxEy5jBgr5ugoPXbSgyd7fpw
  • 1DpA1wTZqGqP9pEcjfZ9bsGEHzbjcsTKq1
  • 1MBfGEss64UsqkWKA5ygs3Rbb5vnLgbtba
  • 1FLwiuF95C45se8VtxQ4g882Gfr7V3qQ3H
  • 1Aeb9P9ugJMogBenF8KtKwsk9ruD9x3DgM
  • 19PRxthVN1P9hsXcStqc2Kp8Yy4hXyXVau
  • 15KquhG7RGkyXvEVT1aXLgPt4qgBEVe8rN
  • 1FhTVkgUpVyWNRG8bJkgyJipEmoEtitZwd
  • 12ELWfXgRgqhtt8KenQbAfuBbAb1Rd3GJ7
  • 1CcWVVERk1oqjC7UbWrGSGWLGvh2YTCx8k
  • 13Hayv2eeuwHTcUNhZVeCJytdBQosoSwVq
  • 17cPvTgQ4vsG9D6iZqTL3JChjd8ApFYTPA
  • 1BpSdbzRuVp3Pd9zzjwJvsLaTxabgyRoJ6
  • 1B5ic9iQpyafTEfWxHM4Xq6PkzbickrL8g
  • 1D8qdtNLNbvugZyMYUyhzcGiCdFinxHgtH
  • 1FbN9mgTzppSUGRgBs1o7N8FpPQVfoRrKd
  • 1AbhXaiFxR52NDTrjAtzsdyhooVNoVchy1
  • 33y8csxbkgTa73vcrmAnTE18VNT6A14ub6
  • 1Dz3tE5mspT4fk9fxkfZk6fBcgav28XxRd
  • 19AXt8DjBCJEXaoqYf3hF7UieTjKpT5Gkm
  • 12mojuzVPeSh26qmA9GLJFADo4chgGbtj3
  • 12djMjPKd6Bv2BaXUNVuAjnuusKA66qCkX
  • 199ZxJd71PJkMjjTdQdh7ekmQ2amE1tVe6
  • 1nJCE7GPLEgKVtoDB2vNKxivw3U6ogMeS
  • 1NpyscBsNNa4R3MbjpUDkjVskSbbbaJXwg
  • 17U1BaXwyuxeX2sZyMjC25G8skrZ8mtTdz
  • 1HSb4fZHmyNro5LGyjQFpcDwqKjRUqJhh2
  • 1CYBbByg3eXE9LRUwh6j7ZMtFrJJyFcAcP
  • 1NGCsGqSdNEKpptQ4DKbJEva59cTSk369o
  • 12kieSEdCV4ikxdXXXC23ZsDcNmmKrRmwA
  • 1KETRZDKH5UNdDiJ5UPm4c7ZqiEVQ5zMPb
  • 1LjGz2WcECaNpK1ajWcpsPEQFSxrw5DxMM
  • 1665CsfFELrfiiubFZtLsGHGuqbUz1wXcz
  • 15oPcsqisV8eNSBrFzQdP4HGG4mmawmyzB
  • 1Hjpu99iHc3oi55ZJKf6RHhKbwit8vEzTS
  • 1DyrpsBJnuZyUt6gpJK1Pmpq5zMetdPALt
  • 1MZ6avTVhzxsyZvyNxFVWMutZwjQUhLpYo
  • 1Cg1X5xS6wkLqPksNcsVzm41Mf24PsrE1
  • 1NToziZKcJfyxHpwkcxbafwghGasme4NUf
  • 1CYj5VELcyQhFMyNSLzqPoU3U3A3rTARn7
  • 1G6tobNb4DdEJxaaKxyivp2xdqCtdwhaSS
  • 18SUJTVpkj62FJH5FrLnHs74ogaRb7p47m
  • 16aqr3rXxCtxa8AK3ErftnBQLfzyyhjpXJ
  • 1xPr18gM8YKsaiUkGz9MgpjtwcBQcME2i
  • 1KNky3De36qfDAimJaTXru6LoFUftg7kpC
  • 1Eo9FKmAkNg8UAR4xj6F15Y53phFutzSys
  • 15AKuZPGMkdrpTGJwb87tnaqSyp91JSeeB
  • 1LFkUg9nWmZEBYMxzizXpHXfyy5CRvmzaA
  • 1CJ1X3UA5Ex2sTSFjwsKAZm2SPmvFT9pQ1
  • 3KQBGwaHjHvAPcrPdC3iz4LBD5cuJZvbRK
  • MR6gzwzBWzG4zgVQtJ7UHCNDk8B57nQXm7
  • 3HdPmjWX6s7MtpvnNKcVkmTvgT2vuBPbjk
  • 3AVPReS68YdnTx2KLVdEhcw4p5VBzEZU2x
  • 38xuKnL833jmhy5EsD7mQTa5ZKXbyaMjkN
  • 3CBXDSdTem6nemaSt2bpXUmyjXDWnxya2B
  • 3J7f6W7cmXg9cyKf4u8YxJGEpqqGBsSw4j
  • MVuJJHmTxtQUP4kFYtvcWpxanpnFpYt32M
  • MUBjPb84CNZtZAEj3ydSSjwhxGCFqQ8HCy
  • 35zm8tHNPpM1cscZ2LkdN1bRKTWbTXdxt5
  • 3KXqzbRqDH6HSxWWceVHusxJ5rSBESZ5wW
  • MU6Gn6QxWibEMQTmwvZt6PqBtdzsaVSqRK
  • MJ9YQXmDzRzykLGJcLEqwoNb3uTYt8uQDm
  • 3LPo1MZLvmMZm4S22V4gUxv9b8PKC7DPJ2
  • 3PuNWAbjXChijBZJhWFvzFTf5rPejpsPku
  • 3QLtNLtS8bpfL8aKXmgoybzsJASKtyG8bA
  • 3NrRzSkHBYYhyLM2YcWRFFXQz7Y9dNJZjR
  • 33C6nhUM2XbaJAWK8Da2KbRmGmZASsULui
  • 3DEHZ3SA2K1BFGXwydvUSqFrihGBbWYGTm
  • 3NrQLf5TGVX6ccvTFqS9W6KYYa9kYVGfBY
  • 3FFJG8kqXA8btpWtHpqcJUArrTRtT9NDph
  • 12FES1pHHx84q37nAPiFuV3q6SL5aVkdtW
  • 3Mbsk4AU8kGm23FXdfD3jWgXhRFCqtyBN1
  • 3MJu1ZQGHsVoV1Ttz8CQvcLgZXYw5CK5dt
  • 1m9WM2qdpgeUcti2pwd6bGsXoGUMUURoZ
  • 14HPigzhxhcyBpsBZ1jh5151RtHHyYR7kP
  • 1FiNgrLn4NVF6UH5ZrFmaaZYtsQhRWhqf4
  • 1Ph6JyyFoGvED9PNHaAFha6tbkBriz7QdB
  • 1DZNohaDckSxJu6YxfeGkqCtxDAhtFP3Jq
  • 16JApT2K6Z9AirkMeBSWyhwuJ8dCfRhY9U
  • 127HofGuQJ6mRZagGQ9NdDP9JnhXSWfvRh
  • bc1qj7gv7glx6jv0nv00d52nulmzum7rjmzsfm63tp
  • 1DhwG72jHAw98fV3DL3F52EM96YPzcYVZe
  • bc1qez5k94h3k2e5p0uhjwtjvezpdjkmx4s4ktevh
  • 14yvZLRJsgJve5vrkdEpPDDVMtYBTHUBWx
  • 19LpEx5a64afwELsVrbhq9yNtfBSn2dcwb
  • 14Hd4etgAyeA2MY1R8ESryrRvTDHUW2dvC
  • bc1qs9zenhtkf4ejxaqc78s2dhx0szxnej3d30gl5m
  • 1BqnUDx6rfJyyk5o7Pei7Kryssm5rqgBhY
  • 12CJSd173Ui1PDcV5yWqYjT6j8rWQvCswM
  • 12NYrvFnsc9tSxMqAwzDqhKNhgRQv1iX2n
  • 1MHgQtN39QzFpLhJ5uXJ69uARwjdEe173Y
  • 1NMs6xMiiA5SyAk8CzQZbey7RuovrHrR84
  • 13RAVqdCpRP68jdPm3MuSACyUFnJX5hKCq
  • 1PWruA6XaKzPC92VqBB6MgAsvLCkW1H4U1
  • 1D3sh9TDTBXDhBpEZVzZLy8b5mQTwx1a4C
  • 1B18X6qL1dCzxW9i2Zk67qwfJ1g44FoHSE
  • 13Epn22pqjdTkpyUCHiWTYs1ysqm5PsVrz
  • 1BdTXN79UeYBpMg5tvqsJrebSMqHySQ2UM
  • 1NFjovRUFq31UZmkMkRgnxcnYspoW7o5qB
  • 1H4ZyLw2WPqtXPnnVRUsMpW5cxXzDoVKLj
  • 1KkMDJi5suVuXveY6vUN9bBDF1XRQFYvm7
  • 1GmJSYfLTB9depThZW7qjvRGUrJjAPkpAr
  • 1CyGVkWwCQ4gGXahSBhiAH1AgNtz6dMHs1
  • 16g6zfpyyFPYkXGfGnT4goSkLN9tbMjzu
  • 12i8q8K7apATJworX48SqQzNgiVmPpWGpz
  • 1HGRVnvDaMAnSemfgepvA6cgo7w1ntPg6W
  • 12MTWExwxvUXkdLnaTo3ce7n1V2E41HMHd
  • 1HK5wyAfwGieF69YYQT75iHzjnJkEVrK2w
  • 15TWfmkMw1eBP8qdczL5MQEorTW4ZmWWae
  • 1VnrARLKAbNcGJeXrs6McH4Js5DWWSbRc
  • 19Q3HZtnznuB5cuWng8cacwqZV13gNpZaN
  • 14JDpPYwZNPbDBGHTfHGuyqB5jADiBcxgK
  • 1HQ7wGdA5G9qUtM8jyDt5obDv1x3vEvjCy
  • 1CRHXc2e4sJ9gKPVsuAMW5iwNfDB5P74WW



Alternative version of the sextortion/ransom note;
Quote
Hey!

I know your pass is: [password]

I infected you with my private malware, (RAT) / (Remote Administration Tool), a few months back when you visited some website where my iframe was placed and since then, I have been observing your actions.
The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won't even notice about it.

I have also access to all your contacts, private pictures, videos, everything!
I MADE A VIDEO showing you (through your webcam) STATISFYING YOURSELF!
You got a very good taste! Hahaha...
I can send this video to all your contacts (email, social network) and publish all your private data everywhere!

Only you can prevent me from doing this!

To stop me, transfer exactly [$ramson] with the current bitcoin (BTC) price to my bitcoin address.
I think it's a very good price compared to the damage and hell it can bring into your life!
If you don't know how to get bitcoin, Google - "How to buy Bitcoin".
The wallet you can create here: [bitcoin server URL]

My bitcoin adress is: [bitcoin address]

After receiving the payment, I will delete  the material I got from you, we will forget everything and you can continue living your life in peace like before!
I give you 3 days to get the bitcoins and pay! Since I got access to your account, I know if this email already has been read!
To make sure you read this email, I sent it multiple times!
Don't share this email with anyone, this should stay our little secret!


Offline Asaeis Wi Vio

  • Newbie
    • Posts: 31
I've received pretty much an identical email with the dude/dudette claiming to know my password and have access to my email account. The content of the email is virtually similar to that last message.

Only problem is that the password the assailant professes to know is a really old password which i thankfully don't use anymore.


Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
Yes, it'll be farmed from an old website that was hacked - check that here - remember all those gaming sites that got hit a few years ago, most of the details they use come from that/those, otherwise it would mean they are hacking very big adult websites owned by people with Russian names who don't take to kindly to that sort of activity occurring on their property...


Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
Verbatim [sic] text of the latest bitcoin blackmail message as of Feb 2021;

Quote
Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which you use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:
Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account ([victims email address]).

One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links from your inbox emails).
All ingenious is simple. =)

This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history to my servers.
I have access to all your messengers, social networks, emails, chat history and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until this letter...

While gathering information about you, I have discovered that you are a big fan of adult websites.
You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.

Let's settle it this way:
You transfer $[amount] USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.

This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.
In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.

Here is my bitcoin wallet: [bitcoin address]

You have less than 48 hours from the moment you opened this email (precisely 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated the return address).
*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.
*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.
*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.

Things you don't need to worry about:
*That I won't be able to receive your funds transfer.
- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer.
- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!

Everything will be done in a fair manner!

One more thing... Don't get caught in similar kind of situations anymore in future!
My advice - keep changing all your passwords on a frequent basis


Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
Bitcoin and crypto-currency scammers appear to be hijacking the current Ukraine/Russia conflict by sending out the following message with unattributed (not be affiliated with International Business Settlement or the National Bank of Ukraine, or any other known or official entity, who look to be responsible for brokering support on behalf of Ukraine) Bitcoin, Litecoin, Ethereum, USDT (Tether) and Polkadot addresses;

Quote
Stand with the people of Ukraine. Now accepting cryptocurrency donations. Bitcoin, Ethereum and USDT.

BTC - 357a3Sc2Akf7EkqvP18osJFerwAPjsU4jp

ETH and USDT (ERC-20) - 0x165C0909b0a9F02060b7976BABE4e2faa42CB 35c
TRX and USDT (TRC20) - TYJpBKHzef86fmP8gj98Y7Fwwpz6WZa5Rx

It's an Official Ukraine Government request for help and crypto wallets. You can verify on Google.

The people of Ukraine are grateful for the support and donations from the global crypto community as we protect our freedom. We are now accepting Polkadot and Litecoin donations too:
$DOT: 1x8aa2N2Ar9SQweJv9vsuZn3WYDHu7gMQu1RePj ZuBe33Hv
$LTC: LVAuGQWSyfRtHixzUQXk8hMjKJqLmbSegE
More cryptocurrencies to be accepted soon. Every bitcoin counts.

Crypto community continue to support Ukraine.
This will certainly contribute to the Ukrainian victory as well as support civil people. We will win — the best people with us.


Offline kat

  • Administrator
  • Hero Member
  • *
    • Posts: 2583
    • KatsBits
New extortion/blackmail scam text targeted at website/business owners.
Quote
Your Website Has Been HackedY0ur Site Has Been Hacked
 
PLEASE FoRWARD THIS EMAIL T0 S0MEoNE IN YoUR CoMPANY WH0 iS ALLoWED T0 MAKE IMPORTANT DECISIoNS!
 
We have hacked your website [DOMAIN] and extracted y0ur databases.
 
H0w did this happen?
 
0ur team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able t0 get y0ur database credentials and extract y0ur entire database and move the informati0n t0 an offsh0re server.
 
What d0es this mean?
 
We will systematically g0 through a series of steps of totally damaging your reputation. First y0ur database will be leaked 0r sold to the highest bidder which they will use with whatever their intenti0ns are. Next if there are e-mails found they will be e-mailed that their informati0n has been sold or leaked and your site [DOMAIN] was at fault thusly damaging y0ur reputation and having angry customers/associates with whatever angry customers/ass0ciates d0. Lastly any links that y0u have indexed in the search engines will be de-indexed based 0ff 0f blackhat techniques that we used in the past to de-index 0ur targets.
 
H0w do i stop this?
 
We are willing t0 refrain fr0m destroying your site's reputati0n f0r a small fee. The current fee is $3000 in bitcoins (.16 BTC).
 
Please send the bitcoin t0 the following Bitcoin address (Copy and paste as it is case sensitive):
 
[BITCOIN ADDRESS]
 
 0nce you have paid we will automatically get informed that it was your payment. Please n0te that you have to make payment within 3 days after opening this e-mail 0r the database leak, e-mails dispatched, and de-index of y0ur site WiLL start!
 
H0w do i get Bitcoins?
 
Y0u can easily buy bitcoins via several websites 0r even offline fr0m a Bitcoin-ATM.
 
What if i don't pay?
 
if y0u decide n0t to pay, we will start the attack at the indicated date and uphold it until y0u d0, there's no counter measure t0 this, y0u will 0nly end up wasting more money trying to find a solution. We will completely destr0y y0ur reputati0n am0ngst google and y0ur customers.
 
This is n0t a hoax, do n0t reply to this email, d0n't try t0 reas0n 0r neg0tiate, we will not read any replies. 0nce y0u have paid we will st0p what we were d0ing and y0u will never hear fr0m us again!
 
Please n0te that Bitcoin is anonym0us and n0 0ne will find 0ut that y0u have c0mplied. Finally don't reply as this email is unmonit0red.