BTC Scam based on past stolen credentials
Scammer bulk sends emails to users, whose email were part of past leaks, dumps, etc.
For example email [email protected] was leaked from a forum like Invisin Powerboard, or service like bit.ly and with its hashed password.
The password had low entropy and thus was reversed using rainbow tables or other methods.
The threat actor obtains such lists of emails / passwords and bulk sends a fake message about his magical abilities to intercept any new password etc.
Thanks to sevenofnull for the sample.
BTC: 1PNzJwB1CuVnKqKJQnu31E5ckiz9VxTcND = $0
Subject: According tο our security service, your account has been hacked. Change your password immediately.
Spam relay 180.250.96.202
Hi! I'm a hacker who hacked your operating system a few months ago. This means that I have full access to your account: At the time of hacking your account([email protected]) had this password: abcxyz You can say: this is my, but old password! Or: I can change my password at any time! Of course! You will be right, but the fact is that when you change the password, my malicious code every time saved a new one! I've been watching you for a few months now. But the fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence from e-mail and messangers. Why your antivirus did not detect my malware? Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing how you masturbate in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use. If you want to prevent this, transfer the amount of $950 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin"). My bitcoin address (BTC Wallet) is: 1PNzJwB1CuVnKqKJQnu31E5ckiz9VxTcND After receiving the payment, I will delete the video and you will never hear me again. I give you 48 hours to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Bye!
