No Hidden Fees
In the previous 48 hours, security administrators have seen another 'sextortion' message start springing up in customer inboxes all over.
The most unnerving piece of this message is that it records a secret phrase either in the headline or the principal sentence. This secret word presumably looks well-known, and in case you're one of the (excessively many!!!) individuals who reuse a similar secret word for numerous locales (or everything), at that point this email appears to be extremely concerning.
We got a warning from a customer that they had gotten something much like the accompanying message:
I'm a programmer who cracked your email account and device about half year ago.
You entered a password on one of the insecure site you visited, and I catched it.
Of course you can will change your password, or already made it.
But it doesn't matter, my rat software update it every time.
Please don't try to contact me or find me, it is impossible, since I sent you an
email from your email account.
Through your e-mail, I uploaded malicious code to your Operation System.
I saved all of your contacts with friends, colleagues, relatives and a complete
history of visits to the Internet resources.
Also I installed a rat software on your device and long tome spying for you.
You are not my only victim, I usually lock devices and ask for a ransom.
But I was struck by the sites of intimate content that you very often visit.
I am in shock of your reach fantasies! Wow! I've never seen anything like this!
I did not even know that SUCH content could be so exciting!
So, when you had fun on intime sites (you know what I mean!)
I made screenshot with using my program from your camera of yours device.
After that, I jointed them to the content of the currently viewed site.
Will be funny when I send these photos to your contacts! And if your relatives see it?
BUT I'm sure you don't want it. I definitely would not want to ...
I will not do this if you pay me a little amount.
I think $875 is a nice price for it!
I accept only Bitcoins.
My BTC wallet: 17XHRucfd4kx3W5ty7ySLGiKHqmPUUdpus
If you have difficulty with this - Ask Google "how to make a payment on a bitcoin
wallet". It's easy.
After receiving the above amount, all your data will be immediately removed
automatically.
My virus will also will be destroy itself from your operating system.
My Trojan have auto alert, after this email is looked, I will be know it!
You have 2 days (48 hours) for make a payment.
If this does not happen - all your contacts will get crazy shots with your dirty life!
And so that you do not obstruct me, your device will be locked (also after 48 hours)
Do not take this frivolously! This is the last warning!
Various security services or antiviruses won't help you for sure (I have already
collected all your data).
Here are the recommendations of a professional:
Antiviruses do not help against modern malicious code. Just do not enter your
passwords on unsafe sites!
I hope you will be prudent.
Bye.
Our client demonstrated this was a secret phrase they at present utilized, and they were legitimately worried that the risk was verifiable. We instructed to client to change all concerning their passwords to everything, being particularly careful to reset this secret phrase wherever it was utilized related to the email address which had gotten the notice.
Upon conducting some research, we found that this customer’s password was not compromised
Our speculation is that the con artist has gotten to information from a broke site and is mass mailing this debilitating message to all email tends to contained in that information with the end goal to coerce cash as Bitcoin. This speculation is by all accounts conceived out by the certainties above.
What you can do…
In order to avoid being victimized by such a scam, it’s important to take the following actions:
• Do not use the same password for multiple sites
• Change passwords regularly
Make sure that the below necessary actions are taken care:
(i)Keep your local system free from virus and malware
(ii)Always use genuine OS in your system
(iii)Use anti-virus, firewall and anti-malware tools to protect your system
(iv)Always use tough passwords like Capital, small letter, numerical & special characters
(v)Keep Changing the passwords for mails
(vi) Make your network and IT environment secure
(vii)Make sure your website and web hosting is free of malware and security vulnerabilities. If you are using third party scripts or codes on your site, this usually means running the latest secure version
(viii)It is very very important for you to maintain your website, email,database backup in multiple locations preferably in external devices like USB and hard disk and keep it safe
(ix)Use Income mails spam filtering practices.
• Review destinations like https://haveibeenpwned.com/with the end goal to decide if a record of yours has been imperiled
• If you get a suspicious or debilitating email, don't tap on any connections or download any connections. Contact your IT or security group promptly.
Gratefully this specific case is by all accounts a false alarm.
