Discussion:
Scam warning
(too old to reply)
DoN. Nichols
2018-12-22 00:26:42 UTC
Permalink
The scam appears as an e-mail.

When you open the e-mail it *appears* to have been sent to you
*from* you. It starts with:

======================================================================
As you may have noticed, I sent you an email from your account.
This means that I have full access to your account: On moment of hack
your account has password: squeeze-on
======================================================================

First off -- it is relatively easy to forge an e-mail to appear
to come from you, even if it comes from a different system totally.

The supposed password was *never* used as a password for my
system, but *was* used as a sign-off over my name when posting to the
accordion/squeezebox usenet newsgroup.

It proceeds to claim that your system has been infected for some
time, and that you have been observed viewing a porn site -- and that
the camera in the computer was used to record you "satisfying yourself".

And -- the claim is made that they have all of your contact list
and contacts on social media sites, and that they will forward the video
of both you and the site you supposedly visited to everyone, unless you
pay them something short of $800.00 (not sure whether it is the same for
every run of this).

They want you to pay with bitcoin (making it hard to track).

Since I have so far gotten two of these, and the first came to
an e-mail address which is invalid, so I knew that it was faked to start
with. The second one got my e-mail address right, and I suspect that
I'll see others like it with other invalid e-mail addresses.

They also claim that the e-mail will send a notice to them the
moment you open it to read it -- but there are no headers in the message
which would actually do this if you had an an-email client which would
honor such a request. They want you to pay within 48 hours or everybody
sees what you were supposedly doing.

Oh -- FWIW -- the computer which I use to visit web sites does
not have a camera, which is another reason to distrust this.

But -- I figured that some people who do have cameras in their
computer -- may not know how easy to forge the "From: " address is, so
may believe their claim that is is proof that they have access to your
computer and/or e-mail account.

Good Luck -- and don't bite.
DoN.
--
Remove oil spill source from e-mail
Email: <***@d-and-d.com> | (KV4PH) Voice (all times): (703) 938-4564
(too) near Washington D.C. | http://www.d-and-d.com/dnichols/DoN.html
--- Black Holes are where God is dividing by zero ---
Excelsior960
2018-12-22 17:39:18 UTC
Permalink
ty for the heads up eDon !

glad to see you are still around.. i was thinking
of you folks the other day

ciao

Ventura
Ike Milligan
2018-12-22 19:29:49 UTC
Permalink
Post by DoN. Nichols
The scam appears as an e-mail.
When you open the e-mail it *appears* to have been sent to you
======================================================================
As you may have noticed, I sent you an email from your account.
This means that I have full access to your account: On moment of hack
your account has password: squeeze-on
======================================================================
First off -- it is relatively easy to forge an e-mail to appear
to come from you, even if it comes from a different system totally.
The supposed password was *never* used as a password for my
system, but *was* used as a sign-off over my name when posting to the
accordion/squeezebox usenet newsgroup.
It proceeds to claim that your system has been infected for some
time, and that you have been observed viewing a porn site -- and that
the camera in the computer was used to record you "satisfying yourself".
And -- the claim is made that they have all of your contact list
and contacts on social media sites, and that they will forward the video
of both you and the site you supposedly visited to everyone, unless you
pay them something short of $800.00 (not sure whether it is the same for
every run of this).
They want you to pay with bitcoin (making it hard to track).
Since I have so far gotten two of these, and the first came to
an e-mail address which is invalid, so I knew that it was faked to start
with. The second one got my e-mail address right, and I suspect that
I'll see others like it with other invalid e-mail addresses.
They also claim that the e-mail will send a notice to them the
moment you open it to read it -- but there are no headers in the message
which would actually do this if you had an an-email client which would
honor such a request. They want you to pay within 48 hours or everybody
sees what you were supposedly doing.
Oh -- FWIW -- the computer which I use to visit web sites does
not have a camera, which is another reason to distrust this.
But -- I figured that some people who do have cameras in their
computer -- may not know how easy to forge the "From: " address is, so
may believe their claim that is is proof that they have access to your
computer and/or e-mail account.
Good Luck -- and don't bite.
DoN.
If you visit a website that has been hacked and create a password, the
email may claim that it has one of your passcodes and quote it to you.
it claims they installed a keylogger on your terminal to get your passcode.
Quite amateurish I would say. They wanted $7000 from me. If they had
access to my machine they would have known I don't have anything close
to $7000.

Loading...