Sextortion Email

[#1]

I received the email quoted below, sent to an old email address (not my Plusnet email)

Isn't '<********>' is one of your password? My name is Prudi. I have the taped video of your cam showing your indecent sexual doings & clip you viewed with the help of my backdoor which was there on the website you watched the porno videos. You really are looking eye-catching in the video footage.

My malware then sent all of your mail and FB contacts to me.

I will email your video to your friends unless you pay me 2000 USD via B I T C O I N S within the next 36 hours to the below address:
B I T C O I N Address: 1N1v7aJBXgE9yKbcVxWvgvv2JJWTFDNXe
Please Copy-Paste address because it is CasE SenSiTiVe.

Once I receive the money, I will delete your video and every other details I have about you.

If I do not get the money, I will email your recording to every contact of yours. Just think about the awkwardness you can get. Do not forget if you are in a relationship, how it will certainly affect?

Want proof? Reply with "Yes", & I'll email your recording to 6 of your email contacts right away.

Kind thanks
Prudi Chong

The part I replaced with <********> really was a password I sometimes use when I'm not worried about security and I thought it would not matter if that password was discovered - but this email is annoying.  Since my conscience is clear I'm not about to fork out any money.  This particular scam is new to me, although I found references online such as this one: https://krebsonsecurity.com/2018/07/sextortion-scam-uses-recipients-hacked-passwords/

I was pleased that I was looking "eye-catching".  But I'm not sure "Kind thanks" is the correct way to end an extortion email.  Has anybody else come across one of these (or did you all just pay up)? 

[#2]

I've had loads of these. Caused by somewhere you log in to leaking your password. You can find out where it was leaked from by entering your email here: https://haveibeenpwned.com/

Change your password once you know where it was leaked from. Nothing has ever come from these blackmail emails for myself.

Search google for more info.

You can forward the email to NFIBPhishing@city-of-london.pnn.police.uk  if you think it will do any good. I sent a couple of mine but now I just delete them.

Also if you use Avast anti virus (and probably others) for a small price you can get their password tool that not only creates and saves your passwords but also lets you know if you have duplicate or weak passwords as well as letting you know if your password has been leaked.

[#3]

I got a few of those earlier in the year. What a pain they are.

@elsie That pwned site only says whether your details have been leaked, can't find where it tells you from what site?

Mark

[#4]

There are quite a few other sites you could try. There is a lot of info on this one.

https://www.howtogeek.com/343947/how-to-check-if-your-password-has-been-stolen/

(not an affiliate link)

Failing that, try a google search for 'leaked password checker'

[#5]

@ReedRichards I had one a couple of weeks ago but not with a password attached. Wouldn't worry me in the slightest. I don't use FB or social media at all 🙂

Even if it had a password, like you, I use very trashy passwords for non essential stuff. And I'd be amazed if my email address was a total blank in the outside world. It's been in use over 12 years now and I use it for nigh on everything. I get on average about 3-6 spam messages a day. Takes seconds to deal with if I go online to view. I usually use Thunderbird which has rules written such I don't even see them in the first place. As I have never contacted those addresses they all automatically go straight into the junk folder. All I do is CTRL+A and delete. Gone. They very rarely get read past the headers. I don't really know why people bother sending them out in the first place. Sad life they lead.

For the essentials in life, banking etc, I have paid for email addresses. Very few know them and not once in over 10 years have I had any spam come through. And the day the first message comes through, case of delete that email address and create a new one. I can have up to 400 at any one time on each domain 🙂 

And no, I didn't pay up.

[#6]

---

@elsie wrote:

I've had loads of these. Caused by somewhere you log in to leaking your password. You can find out where it was leaked from by entering your email here: https://haveibeenpwned.com/

---

According to this site, my email address was pwned (how do you pronounce that?) in 7 breaches, although some of these may just be repeat listings.  My best guess for the culprit would be Daniweb, a site that sometimes sends me emails so I presume I may once have registered with. 

[#7]

I've had quite a few of them - they make funny reading :

Hi, dear user of xxxxx.co.uk.

I'm sorry for my english, I'm from East Europe.

We are installed one RAT software into you device.

On this moment you email account is hacked (see for <from address>, now I have access to you accounts).
I dowload all confidential information from your system and I had some more evidence.

The most intersting moment that I have - it's videos record as your masturbation.

I posted my virus on porn site, and then you installed it on your Operation System.
When you clicked play button on porn video, at that moment my trojan was downloaded to your device.
After installation, your front camera shoots video every time you [-Censored-], in addition, the software is synchronized with the video you choose.

[#8]

I posted one here a while ago.

You caught me doing what?

[#9]

@ReedRichards You should issue a counter claim insisting that there might be people in this world who will pay good money to see "your sexual doings" with the help of Prudi's "back door", and you therefore claim copyright to any material she has and the rights to all earnings therefrom.

More seriously, there was a TV documentary fairly recently about Dan Lobb, a TV presenter, who'd been subjected to such blackmail, although in his case his (solo) 'sexual doings' (performed for someone he thought was a woman) had actually been recorded and distributed.

[#10]

They don't usually helpfully quote your password - if its a low security password that you use for short-term signups then they have told you that they have no important information on you.

If you look at the email headers, you should find that the real sender is obviously fake.

[#11]

---

@elsie That pwned site only says whether your details have been leaked, can't find where it tells you from what site?

Mark

---

It should look like this 

Looks like my details have been traded on the internet

[#12]

---

@ReedRichards wrote:

---

@elsie wrote:

I've had loads of these. Caused by somewhere you log in to leaking your password. You can find out where it was leaked from by entering your email here: https://haveibeenpwned.com/

---

According to this site, my email address was pwned (how do you pronounce that?) in 7 breaches, although some of these may just be repeat listings.  My best guess for the culprit would be Daniweb, a site that sometimes sends me emails so I presume I may once have registered with. 

---

PAWNED its normally abbreviated to pwnd being as its leet speak with all the vowels missing from back in the day when in game chat had monster limitations and you wanted to trash talk....