Bitcoin extortion

Dororo

Administrator
Staff member
Return-Path: <admin@k511.me>
Received: from k511.me ([59.106.209.91])
Reply-To: jrshippings000@gmail.com
From: <admin@k511.me>
Subject: Re: Be sure to read this message! Your personal data is threatened!
Date: 16 Jan 2020
Message-ID: <20200116162124.A8DF31237BC9D47F@k511.me>

My bitcoin wallet address: 3DiqwWmofSnsbaDbD9L5EAFktDWBtRSEGs
 

Marie

Administrator
Staff member
Return-Path: <admin@k511.me>
Received: from (EHLO k511.me) (95.216.34.242)
Reply-To: jrshippings000@gmail.com
From: <admin@k511.me>
Subject: Re: Be sure to read this message! Your personal data is threatened!

What actually must you do?
Clearly, I think, $850 USD will be a inexpensive amount of money for this very little riddle. You'll do the payment by bitcoins (if you do not know this, go searching on how to purchase bitcoin in Google or YouTube).

My bitcoin wallet address: 3DiqwWmofSnsbaDbD9L5EAFktDWBtRSEGs (It is cAsE sensitive, so copy and paste it).
 

Marie

Administrator
Staff member
Return-Path: <teamcity@sparkstudios.com>
Received: from mail.infoyatirim.com (mail.infoyatirim.com.tr.[88.255.229.246])
From: OLD BUDDY <teamcity@sparkstudios.com>
Message-ID: <F4.C3.27352.407AB2E5@mail.infoyatirim.com>

If you want to prevent this, transfer the amount of $950 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is: 17CHyS2veZFbc5BZPxGr1NBdr7XVFrM3yh
 

Miyuki

Administratrix
Staff member
Received: from hwsrv-687127.hostwindsdns.com (192.236.179.188)
Subject: I hacked your computer
Date: 20 Feb 2020

If you want to prevent this, transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is: 1KB1GNhSXhzniPyoEnDUQuiWL8PzAHTnsP[/plain]
 

Marie

Administrator
Staff member
Return-Path: <darkvampyre82@excite.co.uk>
Received: from [209.146.20.211] ([209.146.20.211])
From: <darkvampyre82@excite.co.uk>
Subject: Check the confidentiality of your information (according to our security service, your account has been hacked).
Date: 25 Feb 2020
 

Miyuki

Administratrix
Staff member
This was interesting.

Return-Path: <mcrenshaw@greenwoodcountylibrary.org>
Return-path: <mcrenshaw@greenwoodcountylibrary.org>
Received: from host217-35-85-211.in-addr.btopenworld.com ([217.35.85.211]:30676)
Date: 2 Jan 2020
From: <mcrenshaw@greenwoodcountylibrary.org>

4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [217.35.85.211 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?217.35.85.211>]
1.0 FUZZY_WALLET BODY: Obfuscated "Wallet"
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/)
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods
2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS
0.9 FSL_BULK_SIG Bulk signature with no Unsubscribe
3.0 OBFU_BITCOIN Obfuscated BitCoin references
3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1)
0.5 PDS_BTC_ID FP reduced Bitcoin ID
2.2 BITCOIN_MALWARE BitCoin + malware bragging
0.9 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address

Hěllø!

Í åm å håcker whø hås åccess tø yøür øpěråtíng systěm.
Í ålsø håvě full åccěss tø yøür åccøüňt.

Í'vě běěn wåtchíng yøü før å fěw mønths nøw.
Thě fåct ís thåt yøü wěrě ínfěctěd wíth målwårě thrøügh ån ådült sítě thåt yøü vísítěd.

Íf yøü årě nøt fåmílíår wíth thís, Í wíll ěxplåín.
Trøjån Vírüs gívěs mě füll åccěss ånd cøntrøl øvěr å cømpütěr ør øthěr děvícě.
Thís měåns thåt Í cån sěě ěvěrythíng øn yøür scrěěn, türn øn thě cåměrå ånd mícrøphøně, büt yøü dø nøt knøw åbøüt ít.

Í ålsø håvě åccěss tø åll yøür cøntåcts ånd åll yøür cørrěspønděncě.

Why yøür åntívírüs díd nøt detěct målwårě?
Ånswěr: My målwårě üsěs thě drívěr, Í üpdåtě íts sígnåtürěs ěvěry 4 høürs sø thåt yøür åntívírüs ís sílěnt.

Í mådě å víděø shøwíng høw yøü såtísfy yøürsělf ín thě lěft hålf øf thě scrěěn, ånd ín thě ríght hålf yøü sěe thě víděø thåt yøü wåtchěd. Wíth øně clíck øf thě møüsě,
Í cån sěnd thís víděø tø åll yøür ěmåíls ånd cøntåcts øn søcíål nětwørks. Í cån ålsø pøst åccěss tø åll yøür ě-måíl cørrěspønděncě ånd měssěngěrs thåt yøü üsě.

Íf yøü wånt tø prěvěnt thís, trånsfěr thě åmøünt øf $1500(USD) tø my bítcøín åddrěss (íf yøü dø nøt knøw høw tø dø thís, wrítě tø Gøøglě: 'Büy Bítcøín').

My bítcøín åddrěss (BŤC Wållět) ís: 19A5rdrxb4MREtyGWo944uRoNDBxBPNNG8

Åftěr rěcěívíng thě påyměnt, Í wíll dělětě thě víděø ånd yøü wíll něvěr hěår mě ågåín.
Í gívě yøü 48 høürs tø påy.
Í håvě å nøtícě rěådíng thís lěttěr, ånd thě tíměr wíll wørk whěn yøü sěě thís lěttěr.
Fílíng å cømplåínt søměwhěrě døěs nøt måkě sěnsě běcåüsě thís ěmåíl cånnøt bě tråckěd líkě my bítcøín åddrěss.
Í dø nøt måkě åny míståkěs.

Íf Í fínd thåt yøü håvě shårěd thís měssågě wíth søměøně ělse, thě víděø wíll bě ímmědíåtěly dístríbütěd.

Běst rěgårds!
 

Naruto

Administrator
Staff member
Return-Path: <test@tbts.co.th>
Received: from WIN-6MSK4AONJGF.home ([119.59.96.64])
Message-ID: <92736905307008.7757Q85QBI@tbts.co.th>
Subject: Security Notice. Someone has access to your system.
From: Wynter Bridges <test@tbts.co.th>

If you want to prevent this, transfer the amount of $500 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is: 1EmnDWEowzmzfqVq8YM32btYGbj6kUSHed
 

Phantom

Ninja
From: 186.74.215.34, Panama, Cable & Wireless Panama
Return-Path: <majordomo@24sintfrans.be>
X-YahooFilteredBulk: 186.74.215.34
From: <majordomo@24sintfrans.be>
Subject: Check the confidentiality of your information (according to our security service, your account has been hacked).
Date: 27 Feb 2020

_Hello! Í am a hacker who has access to yoür operatíng system. Í also have full access to yoür accoüňt. Í've been watchíng yoü for a few months now. The fact ís that yoü were ínfected wíth malware throügh an adült síte that yoü vísíted. Íf yoü are not famílíar wíth thís, Í wíll explaín. Trojan Vírüs gíves me füll access and control over a compüter or other devíce. Thís means that Í can see everythíng on yoür screen, türn on the camera and mícrophone, büt yoü do not know aboüt ít. Í also have access to all yoür contacts and all yoür correspondence. Why yoür antívírüs díd not detect malware? Answer: My malware üses the dríver, Í üpdate íts sígnatüres every 4 hoürs so that yoür antívírüs ís sílent. Í made a vídeo showíng how yoü satísfy yoürself ín the left half of the screen, and ín the ríght half yoü see the vídeo that yoü watched. Wíth one clíck of the moüse, Í can send thís vídeo to all yoür emaíls and contacts on socíal networks. Í can also post access to all yoür e-maíl correspondence and messengers that yoü üse. Íf yoü want to prevent thís, transfer the amoünt of $950(USD) to my bítcoín address (íf yoü do not know how to do thís, wríte to Google: 'Büy Bítcoín'). My bítcoín address (BŤC Wallet) ís: 18Jro9LNFqBQarcc63WYGf3w7PdDAiwXpk After receívíng the payment, Í wíll delete the vídeo and yoü wíll never hear me agaín. Í gíve yoü 48 hoürs to pay. Í have a notíce readíng thís letter, and the tímer wíll work when yoü see thís letter. Fílíng a complaínt somewhere does not make sense becaüse thís emaíl cannot be tracked líke my bítcoín address. Í do not make any místakes. Íf Í fínd that yoü have shared thís message wíth someone else, the vídeo wíll be ímmedíately dístríbüted. Best regards!
 

Sphinx

Administrator
Staff member
Return-Path: <plaza@mailinator.com>
Received: from sanpei-sheet.co.jp ([103.206.118.181])
X-RC-FROM: <plaza@mailinator.com>
Message-ID: <2a388eddd6fdd7dec2c771dd30446e4c0af275@mailinator.com>
From: Stephan <plaza@mailinator.com>
Subject:
Date: Thu, 19 Mar 2020

My computer infected your computer and we were able to access it and your data. If you want to keep everything a secret, we strongly recommend that you transfer $ 200 to your BTC wallet 15ZKriap5tNxWJnqNmef8xhWMXqaWLCGWo

My forum https://s-m.cc
 

Kat

Administrator
Staff member
Return-Path: <kailiu@ucdavis.edu>
Received: from (EHLO newsgw-01.dd24.net) (193.46.215.83)
From: "jqx@Tudel.edu" <kailiu@ucdavis.edu>
Date: 27 Mar 2020
Subject: Covid Notice

I've infected your device for a month now with my ransomware through a Porn site that you visited via cookie pop-up.

If you are not familiar with this, I will explain. My Crypto Ransomeware logger gives me full access and control over your device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I can compromise all your messages,emails and contacts on social networks even with dihamilton22@yahoo.com,personal files such as messages, your private photos, chat logs and other correspondence.

I can also send the video I made of you pleasuring yourself to the interest of your friends if you choose to call my bluff.

If you want to prevent this, transfer the amount of $150 to my bitcoin address .You can transfer funds with any bitcoin exchange such as Blockchain, Coinbase, Bitstamp or Coinmama.

(BTC Wallet Address) is: 3MF2fBJzZhHob2vFF7ESRA9nyW1UTkYJE7
Upon confirming your Btc transfer you can rest assured I will not bother you anymore.
Due to Social distancing and restrictions you have 85 Hours for Btc remittance.

Filing a complaint is FUTILE and this bitcoin address cannot be followed up.

If I find that you have shared this message with someone else,you wouldn't want to know to what extent.
BE SAFE AND AVOID TOO MUCH PORN
Regards
King X
---------------------------------------------------------------
This Message will be terminated and deleted after some time
 

Maya

Ninja
Return-Path: <ukakxor@vmb-service.ru>
Received: from fblau.fairbrother.com.au ([185.14.148.74])
X-RC-FROM: <ukakxor@vmb-service.ru>
Message-ID: <2c1f9c5a517aaf5c7f80f6a5ae7a49e5c612130fd0@vmb-service.ru>
From: Delmer <ukakxor@vmb-service.ru>
Subject:
Date: Mon, 23 Mar 2020

My computer infected your computer and we were able to access it and your data. If you want to keep everything a secret, we strongly recommend that you transfer $ 200 to your BTC wallet 15ZKriap5tNxWJnqNmef8xhWMXqaWLCGWo

My forum SM Club - предлагает вам получить новую профессию, новый вид заработка. Основой проекта SM Club является: схемы заработка, обучение онлайн бизнесу, курсы, бесплатные схемы заработка, обмен темами, открытие и продажа фирм и многое другое
 

Maya

Ninja
And another one:

Return-Path: <srt@pgkweb.ru>
Received: from cheers-ltd.co.jp ([50.196.148.195])
Message-ID: <26bf6bfff4df0af9da2553000bdfec4063b7ebfcce@pgkweb.ru>
From: Byron <srt@pgkweb.ru>
Date: Sun, 22 Mar 2020
 

Garreg Ddu

Gweinyddwr
Staff member
Q: How do I know it is a scam? A: I don't have a webcam.........

Return-Path: noreply.cvid-vidc31@gentianfumewort.com
Date: Sat, 28 Mar 2020 18:54:44 -0700 (PDT)
From:<noreply.cvid-vidc31@gentianfumewort.com>
To: ***********************@********.***
X-Sender-IP: 99.251.3.2

Origin IP Address = 99.251.3.2 = Rogers Communications Canada Inc., Ontario, Kitchener, Canada.


You may not know me, and you are probably wondering why you are getting this email, right?
I'm a Hacker who cracked your devices. I setup a malware on the adult video (porn) website and guess what, you visited this site to have fun (you know what I mean). While you were watching videos, your internet browser started out functioning as a "HRDP" - Hidden Remote Desktop Protocol having a keylogger which gave me accessibility to your screen and webcam. After that, my software program obtained all your contacts and files. You entered a password on the websites you visited, and I intercepted it. Of course, you can change it, or already changed it. But it doesn't matter, my malware updated it every time.

What did I do?
I generated a backup of your every system (private document files, video, photos, all files).
I created a double-screen video. 1st part shows the video you were watching (you've got a good taste ha ha . . .), and 2nd part shows the recording of your webcam.
Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)
Do not try to contact me. Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.
I guarantee you that I will not disturb you again after payment, as you are not my single victim. This is a hacker code of honor. Don't be mad at me, everyone has their own work.

exactly what should you do?
Well, in my opinion, $ 500 (USD) Dollars is a fair price for our little secret. You'll make the payment by Bitcoin (search "Bitcoin Wallet" in Application Store then Download & Install) Make a deposit to your wallet. After that, transfer it to my wallet.
My Bitcoin (BTC) wallet address: 1HMsu3Dg3ocegPN2psqQtnsgZESeHVuxmN

(It is case sensitive, Bitcoin wallet address Beginning with 1 and Ending with N)

Important:
You have 2 days in order to make the payment. (I've a Facebook pixel in this mail, and at this moment I know that you have read through this email message). To track the reading of a message and the actions in it, I use the Facebook pixel. Thanks to them. (Everything that is used for the authorities can help us.) If I do not get the Bitcoin, I will certainly send out your video recording to all your contacts including relatives, coworkers and all contacts. Having said that, if I receive the payment, I'll destroy the video immediately. If you need evidence, reply with "Yes" and I will certainly send out your video recording to your 6 contacts. It is a non-negotiable offer, don't waste my personal time and yours by responding to this message.
 

Phantom

Ninja
Return-Path: <denasmi@webcafe.net>
Received: from pool-77-222-101-79.is74.ru ([77.222.101.79])
From: <denasmi@webcafe.net>
Subject: H¡gh level of r¡sk. Your account has been hacked. Change yøur passwørd.
Date: 22 Apr 2020

My bitcoin address (BTC Wallet) is: 16QLrb5Ej3VLCaxeivbJxAgfvWEXyqGAfc
 

Hwarang

Member
Return-Path: <szaleeceaof@hotmail.com>
From: Krissie Eizenstat <szaleeceaof@hotmail.com>
Date: Tue, 21 Apr 2020

Purchase $ 2000 in bitcoin and send it to the listed below address:

18xUsmAkZz*NS8nmx4PUXKfewAbB8tEzjHV
 

Spanish Admin

THE Spanish Administrator
Staff member
rebeccaedwards95@yahoo.com
Tue, May 12

I know, ,,,,,,,,, is your password.

I need your 100% attention for the upcoming Twenty-four hrs, or I will make sure you that you live out of guilt for the rest of your life.

Hello there, you don't know me personally. However I know a lot of things regarding you. Your fb contact list, phone contacts as well as all the virtual activity on your computer from past 147 days.

Which includes, your self pleasure video clips, which brings me to the primary motive why I 'm writing this e-mail to you.

Well the previous time you went to the porno websites, my spyware ended up being activated inside your computer which ended up saving a lovely video of your self pleasure act simply by activating your web cam.

(you got a really weird taste by the way lmfao)

I have the whole recording. If perhaps you think I 'm fooling around, simply reply proof and I will be forwarding the particular recording randomly to 4 people you know.

It could end up being your friends, co workers, boss, mother and father (I don't know! My software program will randomly select the contacts).

Will you be able to gaze into anyone's eyes again after it? I doubt that...

Nonetheless, it doesn't need to be that path.

I'm going to make you a one time, non negotiable offer.

Buy $ 2000 in bitcoin and send them on the below address:

1DuH1H*V5aw85F96krk7NChkfA7vjUS3mkv
[case-SENSITIVE copy & paste it, and remove * from it]

(If you do not understand how, lookup how to buy bitcoin. Do not waste my important time)

If you send out this 'donation' (we will call it that?). Right after that, I will go away for good and never ever make contact with you again. I will eliminate everything I have about you. You may very well continue living your ordinary day to day lifestyle with no fear.

You have 24 hours to do so. Your time begins as quickly you read this e mail. I have got an special program code that will alert me as soon as you see this e-mail therefore don't try to act smart.
 

Miyuki

Administratrix
Staff member
<louiselin@leeher.com.tw>

I will not do this if you pay mé a littlé amount. I think $920 is a nicé pricé for it!

I accépt only Bitcoins.
My BTC wallét: 16KfJgmrHrKWS54EjTzgYa3cTmHM8QGHyw
 
Top