I Know Your Password #Bitcoin Extortion Email Variant

A new twist on an old trick emerged this week. The porn ransom email claiming to have incriminating video of the recipient which will be released to contacts if not paid in bitcoin, has now included an old compromised password of the recipients in an attempt to add credibility to the scam. Gotta appreciate that dark web creativity. Where did they get all those passwords? The first report of this new variant was received July 10. Since then dozens more reports have come in relating to just over 2 dozen bitcoin addresses as of Friday. This address has been reported 9 times and also has the most total received at 2.83 BTC:

1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4

This is an example of the email text:

I am aware, (Old, Compromised Password), is your password. You do not know me and you are probably thinking why you’re getting this e mail, correct?

actually, I setup a malware on the adult vids (porn material) web site and do you know what, you visited this site to have fun (you know what I mean). While you were watching videos, your web browser started working as a RDP (Remote control Desktop) that has a keylogger which gave me access to your screen and web camera. Right after that, my software program obtained every one of your contacts from your Messenger, FB, as well as email.

What exactly did I do?

I made a double-screen video. First part shows the video you were viewing (you have a good taste lmao), and 2nd part shows the recording of your webcam.

exactly what should you do?

Well, I believe, $1900 is a reasonable price for our little secret. You’ll make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).

BTC Address: 1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4
(It is cAsE sensitive, so copy and paste it)

Note:

You have one day in order to make the payment. (I have a specific pixel within this email, and now I know that you have read this message). If I do not receive the BitCoins, I will definitely send your video recording to all of your contacts including close relatives, colleagues, and so on. However, if I do get paid, I’ll destroy the video immidiately. If you want evidence, reply with “Yes!” and I will send your video recording to your 13 friends. It’s a non-negotiable offer, and so do not waste my personal time and yours by replying to this email.

The total received balance of all 25 reported password porn scam variant bitcoin addresses is 4.24466898.

These are all the password porn extortion bitcoin addresses reported as of July 13:

Scam Address # Times Reported Current Balance Total Received # Tx Last Tx
1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4 9 2.50252527 2.8311608 15 2018-07-12 7:17:24
1MQNUSnquwPM9eQgs7KtjDcQZBfaW7iVge 3 0.54043954 0.54043954 2 2018-07-12 4:55:43
1PeMj6hcYMCu1eKUAjRq4t7N6EHwDbGyBR 1 0.4644 0.4644 1 2018-07-12 22:13:40
17drmHLZMsCRWz48RchWfrz9Chx1osLe67 2 0.3053 0.3053 1 2018-07-12 4:31:19
19kQT8RpsNNAM5UQ6RjRxRcHbeHhYf6SES 2 0.06982942 0.06982942 2 2018-07-12 14:27:35
1LEBKnvLEZk2cUfyJ1vU5FpueakWyh4m28 4 0 0.03353922 2 2018-03-12 3:53:05
1AWKTr1vq3946tyuxG7Q1mLcJum4rjnmro 3 0 0 0  
1NLh41sRP8QfSkkBrps1wXQXQhyM86HQYh 3 0 0 0  
1YAy8oEjEXsxos5u7y5k7siJ4tSmA71sU 3 0 0 0  
129WARJw8X71na49fvhss4hRpt9TA6V7Jg 2 0 0 0  
1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx 2 0 0 0  
126RbYy96H9BJZs8kCUAkx5exuiMsYSBbm 1 0 0 0  
15gbv1DTTNg82qvb3cpZLLmfqXu1jJaWFE 1 0 0 0  
19EdHu5QJX5mAQ3fbXnsQ6utCvXDLT4LNG 1 0 0 0  
1A8Ad7VbWDqwmRY6nSHtFcTqfW2XioXNmj 1 0 0 0  
1AgHpx8SbUwLqnzo8WtJYefJqMitM3PKb3 1 0 0 0  
1DULdsSARR1fH6D6DV7otavbmUQka3J9uP 1 0 0 0  
1DVFi6yawViqSsKHhiN81FgGxdNLLkdo7j 1 0 0 0  
1EGG38yAtUPThMMU9Ni15mQ3rWHSk8L2u4 1 0 0 0  
1HNxU93ZWcMJsyosNdpirrkL3mGCJLdUc3 1 0 0 0  
1JsbfAMGSJnKqPHUt4ju373DWQfgpUJQzZ 1 0 0 0  
1L4Vj2hJkrrwRhmfoTjmQ3xFWRP34J1iFr 1 0 0 0  
1LoF9TCF8zcpWeeonp7C4427EWsXsUxKe5 1 0 0 0  
1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx 1 0 0 0  
1PLrSKJmzww51A178UgGukF8bXood9ivaQ 1 0 0 0

See Also:

SEXTORTION EMAIL SCAM VARIANT MAKES 22.67BTC OVER FIRST 3 WEEKS – July 26, 2018
BITCOIN PORN BLACKMAIL SCAM MOVED TO POLONIEX WALLET– June 2, 2018
BITCOIN PORN BLACKMAIL SCAM REPORTS SURGE– March 12, 2018

***
Help police and deter future frauds by always reporting scam addresses to BitcoinWhosWho.com. Just lookup the bitcoin address and select “Report Scam”.

Blacklist Scam Bitcoin Addresses

All scam reports are accessible by keyword search on our website or from our “Blacklisted Bitcoin Address” API.

The safest place to buy bitcoins is Coinbase.com

Don’t forget to follow us on Twitter and like our page on Facebook.

47 thoughts on “I Know Your Password #Bitcoin Extortion Email Variant”

  1. The main question is, did the blackmailer really make the video and have they really accessed the victim’s computer?

      1. I got the same message and don’t have a webcam. There’s also no remote image in the email, as he claims.

  2. I’ve received one of these emails today – Bitcoin address 19UuZPkVjWu86gbH8stN9SaN5HNwQeDqTy
    I’ve tried to report it as a scam but the form asks for a website address and I don’t know what I’m expected to enter there; there isn’t a website address for this.

  3. 16PA5qm6rm6icmWw8QCT7a9Bhi4jjYLeye is another scammer – received a scammed email with demand for $1900 payment for supposedly hacking “my wrongdoings” and with subject in the email with my old password, threatening otherwise to “expose me to my friends”

  4. Got a very similar email here, with another bitcoin address:
    1CF2rXnfaD4oh2sJDaH2qFCQz12xFgYCFp

    Note, they try to mask it with an asterisk like this:
    1CF2*rXnfaD4oh2sJDaH2qFCQz12xFgYCFp

  5. I received one from Michel Kitchin (nmreliasxd@outlook.com)…same BS….bitcoin address 19sDkKfzcAo*qXcn58ULmE57YGR1odifnXc . How do you stop these cons!!??

  6. Porn email ransom BS
    bitcoin address 19sDkKfzcAoqXcn58ULmE57YGR1odifnXc
    original bitcoin address has * in it 19sDkKfzcAo*qXcn58ULmE57YGR1odifnXc

    Fake name Michel Kitchin as scammer stated

    1. 14qxuC4sxb2PPoesGTRpAtJvxZhvs7M9Qp

      And he only wanted $1000! WTF! I have more money than that! LOOK AT MY BANK ACCOUNT!

  7. I’ve been blackmailed on the 30/07 for $2900 from : 1JpqbZYZSAvc1nDiirkgg823AXk2b458d7
    Robert Cravens

  8. I received one from “Byron King” – received a scammed email with demand for $2600 payment. send it to 1A9nEG3vbuMDeZ4nRPpAN4GVQhovdVGM1R. Supposedly discovering “my misdemeanors” and with subject title in the email was my windows password, threatening otherwise to “expose me to my friends” and the video of me watching these sex sights.

  9. Mine is 1Bb446YF8AZK3nKchPJQ3J5KwPGRHRARJ5 asking for 1000 $. How to get rid of… change email or just ignore … this is the 3rd run for me there are 2 or 3 they go away for a few months then try again. Now I read them for entertainment value, it is less annoying that way.

  10. I got one on Aug 3rd but actually only saw it yesterday. Same email with an old password. They demanded $8050
    1EzpBt31QP7r8y6kxiDhGEXZ2BNWKchto1

    1. I am well aware bunnymomma is your password. Lets get straight to the purpose. You may not know me and you are probably wondering why you are getting this e mail? There is no one who has compensated me to check you.

      actually, I setup a software on the X streaming (porn) website and guess what, you visited this website to experience fun (you know what I mean). While you were viewing videos, your internet browser initiated working as a RDP having a keylogger which provided me with accessibility to your screen as well as webcam. Just after that, my software program collected all your contacts from your Messenger, social networks, as well as e-mail . After that I created a double-screen video. First part displays the video you were viewing (you have a nice taste lmao), and second part displays the view of your web cam, & its you.

      You do have 2 alternatives. We will review the solutions in details:

      1st solution is to ignore this e mail. In that case, I will send out your very own video recording to every single one of your personal contacts and then just imagine regarding the embarrassment you will get. And likewise should you be in an intimate relationship, exactly how it would affect?

      2nd alternative would be to pay me $7000. Lets describe it as a donation. As a result, I will quickly erase your video recording. You can continue everyday life like this never occurred and you will not ever hear back again from me.

      You will make the payment through Bitcoin (if you don’t know this, search for “how to buy bitcoin” in Google).

      BTC Address: 1QCLNFEHYdYnwq6CvomMN8Nmqij8zf3TAg
      [case sensitive so copy and paste it]

      In case you are looking at going to the police, look, this email message can not be traced back to me. I have taken care of my steps. I am just not trying to demand much, I would like to be rewarded.

      You now have one day in order to make the payment. I’ve a unique pixel within this e mail, and now I know that you have read through this message. If I do not receive the BitCoins, I will send out your video recording to all of your contacts including family members, colleagues, and so forth. Having said that, if I do get paid, I will destroy the recording right away. If you want to have evidence, reply with Yea & I will certainly send your video to your 5 contacts. This is the non:negotiable offer so don’t waste mine time and yours by responding to this message.

      1. Just so you know, in my opinion, the person who wrote this letter is Russian. I have over two decades working with people from around the world. I won’t give away how I know. It may be a helpful clue to someone. Good luck.

  11. This showed up in my junk email

    The password provided is a password from an online merchant that I purchased something from years ago.

    $7000
    18xknJXkd3CiTzps8vG1ojn6WH46UHtDCM
    John

  12. G’day I’m from Australia an received this yesterday… They didn’t have my proper email address and it went into my SPAM Folder.

    XXXXXX (old password) is your pass. Lets get right to the purpose. You may not know me and you’re most likely thinking why you are getting this e mail? Not one person has paid me to investigate about you.

    Let me tell you, I setup a malware on the adult videos (pornography) website and do you know what, you visited this web site to have fun (you know what I mean). When you were viewing videos, your internet browser initiated functioning as a Remote control Desktop that has a key logger which provided me access to your display screen and also web camera. after that, my software collected all of your contacts from your Messenger, Facebook, as well as email account. Next I created a video. 1st part shows the video you were watching (you have a nice taste ; )), and next part shows the view of your cam, yea its you.

    You get two options. We will analyze these solutions in particulars:

    1st solution is to just ignore this message. In this case, I most certainly will send your actual tape to every single one of your contacts and also just think concerning the humiliation you can get. And as a consequence if you happen to be in an intimate relationship, how this will affect?

    2nd solution would be to compensate me $2000. Lets refer to it as a donation. Then, I most certainly will immediately eliminate your videotape. You could keep your daily ro utine like this never occurred and you surely will never hear back again from me.

    You will make the payment by Bitcoin (if you don’t know this, search for “how to buy bitcoin” in Google).

    BTC Address to send to: 1DukwTSC6dN837wCrfLMU8m5kWZZGfZTGM
    [CASE-SENSITIVE, copy and paste it]

    If you have been looking at going to the law, well, this e-mail can not be traced back to me. I have taken care of my moves. I am not trying to charge a fee very much, I wish to be paid.

    You have one day in order to pay. I’ve a specific pixel within this e-mail, and at this moment I know that you have read this e-mail. If I don’t get the BitCoins, I will, no doubt send out your video recording to all of your contacts including friends and family, co-workers, and so on. Nonetheless, if I do get paid, I’ll destroy the recording right away. If you want evidence, reply with Yes! and I definitely will send your video recording to your 8 contacts. It is a nonnegotiable offer, therefore don’t waste my personal time and yours by replying to this message.

  13. Three new addresses:

    1BoXxc5d7uunE8spVcsQ7cPtkeCaVxLF8p
    139Fgp17ynEBzT1DHTqfyY5nMCctynoZkX
    1KFzuvjgfqZpanBVg5x92SsfKkjq5cJG4p

    They want $3000

    All using a password that is about five years old or older.

  14. 17gikapD2VEirb2W7W5WTHg2NkyiXJ2ttn

    I got sextortion email today. I’m only worth $770 in bitcoin
    The email I received did NOT include my email address.

  15. I don’t have an account here so I can not report my scam. Login is required.

    BTC addr​​ess: 1PivHJ8BeoYWEo3snpZHH42nmx7WaPGivg

  16. 1Lughwk11SAsz54wZJ3bpGbNqGfVanMWzk

    Just wanted to add this to the list. Got it twice. They significantly lowered their demand after I ignored the first one, lol.

  17. I found where the users got emails and password. This was from a LinkedIn hack that happened a couple of years ago.

  18. Sent to my company email, but the password was not one I’ve ever used. Here is the BTC address:
    135qVXXBZb3v2tQcLJRA8UAndiUYNybh3J

  19. Received similar email today containing hacked old password. If you care to spend more than 5 seconds on this garbage you can trace the email, which led me to St. Petersburg, Russia of course. the long/lat coordinates might have put him at the city library as the email was delivered from a static IP:
    https://whatismyipaddress.com/trace-email

    Wallet in question is:
    15FsDaUnH9YfHQ1W5n36iPJnhtU8Km2cax

    Website associated with the email was fdfirefightertees.com

  20. I received one today. Not quite the same wording but in a similar vein asking me for $929

    1FF2wjexfHHiiuWwaA6dSEeA4WzAb4ezjU

  21. I’ve been ignoring emails demanding bitcoin since July 2018.
    The emails are getting longer (more wordy) but the amount they demand has been going down. 1st was over 2K, today it’s under 1K. The password they hacked is a fake one that I use on sites I’m not sure of or will never visit again. Here is their bitcoin account:
    1LwibmKAKu4kt4SvRLYdUP3aW7vL3Y78zL

Leave a Reply

Your email address will not be published. Required fields are marked *

Leave the field below empty!

This site uses Akismet to reduce spam. Learn how your comment data is processed.