We would like to bring to your attention, some of our clients have been sent extortion emails (see below).
What the scam artist is using as bait is a password that the client has used in the past. It’s probable that these scammers have purchased or freely downloaded a long out of date list of compromised accounts/passwords from the dark web and are using this as part of their scam.
In this case below the client mentioned that the scam artist shows a password that was once his legitimate password for his account(‘s) he thinks he used over 10 years ago and has not used that password on any account since.
Another client of ours a couple weeks ago who’s email is on a Microsoft O365 email server showed the same thing. Mentioned the password shown was an email password they hadn’t used in a few years.
Be aware of this scam and make sure to have your passwords to something complex moving forward.
Below is an example of the message that was sent to those who have been affected. If you see something like the below message, be sure to contact your helpdesk.
Hello!
I'm a hacker who cracked your email and device a few months ago.
You entered a password on one of the sites you visited, and I intercepted it.
This is your password from Email@Example.com on moment of hack: Past Password Here
Of course you can will change it, or already changed it.
But it doesn't matter, my malware updated it every time.
Do not try to contact me or find me, it is impossible, since I sent you an email from your account.
Through your email, I uploaded malicious code to your Operation System.
I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources.
Also I installed a Trojan on your device and long tome spying for you.
You are not my only victim, I usually lock computers and ask for a ransom.
But I was struck by the sites of intimate content that you often visit.
I am in shock of your fantasies! I've never seen anything like this!
So, when you had fun on piquant sites (you know what I mean!)
I made screenshot with using my program from your camera of yours device.
After that, I combined them to the content of the currently viewed site.
There will be laughter when I send these photos to your contacts!
BUT I'm sure you don't want it.
Therefore, I expect payment from you for my silence.
I think $848 is an acceptable price for it!
Pay with Bitcoin.
My BTC wallet: (Series of Letters and numbers indicating a Bitcoin Wallet address)
If you do not know how to do this - enter into Google "how to transfer money to a bitcoin wallet". It is not difficult.
After receiving the specified amount, all your data will be immediately destroyed automatically. My virus will also remove itself from your operating system.
My Trojan have auto alert, after this email is read, I will be know it!
I give you 2 days (48 hours) to make a payment.
If this does not happen - all your contacts will get crazy shots from your dark secret life!
And so that you do not obstruct, your device will be blocked (also after 48 hours)
Do not be silly!
Police or friends won't help you for sure ...
p.s. I can give you advice for the future. Do not enter your passwords on unsafe sites.
I hope for your prudence.
Farewell.
Again, if you believe you have been affected and have seen a message similar to that of the one above, then contact us or your technical support help desk if you feel you require further assistance or have any questions.
Thank you, and stay safe!