How I Wasn’t Actually Hacked
Today I got an email which was correctly routed to my spam folder. The email claimed to be from a hacker who had gotten access to my email account; as proof of this claim, he directed my attention to the fact that the From address on the email was also my email address.
He was, of course, counting on the fact that most people don’t know it’s possible to set any From address you want; that’s why modern email infrastructure has protections that indicate which servers are authorized to send mail on behalf of which domains, protections this sender didn’t manage to bypass.
Here’s the email contents I got:
as further proof, he provides a ‘password’ for my email address; that password is just the domain name, and is obviously not my actual password
he claims he compromised my account by infecting my machine with a virus on a porn site; since many people visit porn sites, this is probably plausible for a lot of his victims
he claims to have webcam recordings and threatens blackmail, but of course I can trust him to delete all the data if I just pay him $700 once. (that is not how blackmail works!)
Needless to say, if you get such an email, you should ignore it. It’s just a scammer hoping to get money from panicking people who don’t know much about tech.