Emailing claiming to have access to my devices recording me in "explicit" situations, blackmailing for BTC

Blackmail email.

Blackmail email

chinataihua@jstel.net
Authentication-Results: spf=none (sender IP is 52.58.62.223)

Usual, 'I have hacked your computer and have video of you masturbating'

Received: from mes-l1-filt-07.messagestream.com (46.175.48.165) by
MEX-L1-CAS-02.MessageExchange.com (46.175.48.205) with Microsoft SMTP Server
(TLS) id 14.3.498.0; Thu, 1 Jul 2021 23:15:15 +0100
Received: from MES-L1-FILT-07.messagestream.local ([10.200.10.180]) by
messagestream.com with MessageStream ESMTP; Thu, 1 Jul 2021 23:14:49 +0100
Received: from messagestream.com (mes-l1-av-11.messagestream.local
[46.175.48.70]) by MES-L1-FILT-07.messagestream.local with SMTP; Thu, 1 Jul
2021 23:14:35 +0100
Received-SPF: none (messagestream.com: schroedermotors.com does not designate permitted sender hosts)
Received: from [180.178.145.145] ([180.178.145.145]) by messagestream.com with
MessageStream ESMTP; Thu, 1 Jul 2021 23:13:56 +0100
From:
To:
Subject: Payment from your account.
Date: Fri, 2 Jul 2021 06:38:51 +0400
Message-ID:
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Outlook 15.0
Thread-Index: Acqs6timffggbkmk5ablf7ffggbkmk==
Content-Language: en-us
X-ME-Bayesian: 0.000000
X-MessageStream-RefID:
Return-Path: bob.green@schroedermotors.com
X-MS-Exchange-Organization-AuthSource: MEX-L1-CAS-02.MessageExchange.com
X-MS-Exchange-Organization-AuthAs: Anonymous

Usual blackmail email

Email demanding payment of $1650 in Bitcoin equivalent.

leidy.ortega@10d2.saludzona1.gob.ec

----[ NOTES ]-------------------------------------------------------------------

user name changed to 'xxxx'
user site changed to 'yyyy'
used https://www.iplocation.net/trace-email to trace origination
used https://bitcoinwhoswho.com/scams to report it



----[ REPORT ]------------------------------------------------------------------

Type: Extortion Attempt

Date: 20210701


Bitcoin Account: 12kieSEdCV4ikxdXXXC23ZsDcNmmKrRmwA


The email source IP address is: 115.98.79.91

IP Location Info:

IP Address: 115.98.79.91
Country: India
Region: Andhra Pradesh
City: Hyderabad
ISP: Hathway
Organization: Hathway
Latitude: 17.4254
Longitude: 78.5075


Email Header:

X-MUNQ: 8a900bb7fd866fae14b1bd6642ce9364
X-MSKTag: [SPAM]
X-MSK: HYD=0.999999999
Return-Path:
Delivered-To: xxxx@yyyy.com
Received: (qmail 31642 invoked by uid 200); 1 Jul 2021 07:58:04 -0000
Delivered-To: admin@yyyy.com
Received: (qmail 31629 invoked from network); 1 Jul 2021 07:58:03 -0000
Received: from unknown (HELO xsmtp22.mail2web.com) ([10.100.68.61])
(envelope-sender )
by xmail07.myhosting.com (qmail-ldap-1.03) with AES256-SHA encrypted SMTP
for ; 1 Jul 2021 07:57:56 -0000
Received: from [115.98.79.91]
by xsmtp22.mail2web.com with esmtp (Exim 4.92)
(envelope-from )
id 1lyra8-0002xy-4Q
for admin@yyyy.com; Thu, 01 Jul 2021 00:57:56 -0700
Message-ID:
From:
To:
Subject: [SPAM]Payment from your account.
Date: 1 Jul 2021 17:17:54 +0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="windows-1250"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Host-Lookup-Failed: Reverse DNS lookup failed for 115.98.79.91 (failed)
X-SA-Exim-Connect-IP: 115.98.79.91
X-SA-Exim-Mail-From: lexi@lexilarsen.com
X-SA-Exim-Scanned: No (on xsmtp22.mail2web.com); SAEximRunCond expanded to false


Message Text:

Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which you use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:
Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account (admin@yyyy.com).

One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links from your inbox emails).
All ingenious is simple. =)

This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history to my servers.
I have access to all your messengers, social networks, emails, chat history and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until this letter...

While gathering information about you, I have discovered that you are a big fan of adult websites.
You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.

Let's settle it this way:
You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.

This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.
In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.

Here is my bitcoin wallet: 12kieSEdCV4ikxdXXXC23ZsDcNmmKrRmwA

You have less than 48 hours from the moment you opened this email (precisely 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated the return address).
*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.
*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.
*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.

Things you don't need to worry about:
*That I won't be able to receive your funds transfer.
- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer.
- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!

Everything will be done in a fair manner!

One more thing... Don't get caught in similar kind of situations anymore in future!
My advice - keep changing all your passwords on a frequent basis

yyy@striker.ottawa.on.ca
Payment from your account.
To: ...
Content-Type: text/plain; charset="windows-1250"
Mime-Version: 1.0
X-Spamc: is not spam (score=2.4, required=5.0)
X-Mailcleaner-Information: Please contact support@cosmichamlet.net for more information
X-Mailcleaner-Spamcheck: not spam, PreRBLs (SPAMHAUS), Spamc (score=2.4, required=5.0, DATE_IN_PAST_03_06 1.6, BAYES_50 0.8)
X-Mailer: Pegasus Mail for Windows (4.52)
Priority: normal
X-Prerbls: is spam (SPAMHAUS)
X-Mailcleaner-Id: 1lznnP-000Ck1-GX
Content-Transfer-Encoding: 8BIT
Received: from mailguard.cosmichamlet.net by mail.cosmichamlet.net (Subconscious Logic eMail Server) with ESMTP (SSL) id WDK87840 for ; Sat, 03 Jul 2021 14:07:40 -0800
Received: from cxbros.jund.net.br ([170.78.148.18]) by mailguard.cosmichamlet.net stage1 with esmtp (Exim MailCleaner) id 1lznnO-000Cjw-89 for from ; Sat, 03 Jul 2021 14:07:31 -0800

X-Mailcleaner: Found to be clean
X-Mailcleaner-Reporturl: https://mailguard.cosmichamlet.net/rs.php
Content-Description: Mail message body
X-Mailcleaner-Spf: none


Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which you use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:
Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account (info@spiritmountainalaska.com).

One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links from your inbox emails).
All ingenious is simple. =)

This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history to my servers.
I have access to all your messengers, social networks, emails, chat history and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until this letter...

While gathering information about you, I have discovered that you are a big fan of adult websites.
You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.

Let's settle it this way:
You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.

This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.
In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.

Here is my bitcoin wallet: 12kieSEdCV4ikxdXXXC23ZsDcNmmKrRmwA

You have less than 48 hours from the moment you opened this email (precisely 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated the return address).
*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.
*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.
*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.

Things you don't need to worry about:
*That I won't be able to receive your funds transfer.
- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer.
- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!

Everything will be done in a fair manner!

One more thing... Don't get caught in similar kind of situations anymore in future!
My advice - keep changing all your passwords on a frequent basis