I Know Your Password #Bitcoin Extortion Email Variant

A new twist on an old trick emerged this week. The porn ransom email claiming to have incriminating video of the recipient which will be released to contacts if not paid in bitcoin, has now included an old compromised password of the recipients in an attempt to add credibility to the scam. Gotta appreciate that dark web creativity. Where did they get all those passwords? The first report of this new variant was received July 10. Since then dozens more reports have come in relating to just over 2 dozen bitcoin addresses as of Friday. This address has been reported 9 times and also has the most total received at 2.83 BTC:

1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4

This is an example of the email text:

I am aware, (Old, Compromised Password), is your password. You do not know me and you are probably thinking why you’re getting this e mail, correct?

actually, I setup a malware on the adult vids (porn material) web site and do you know what, you visited this site to have fun (you know what I mean). While you were watching videos, your web browser started working as a RDP (Remote control Desktop) that has a keylogger which gave me access to your screen and web camera. Right after that, my software program obtained every one of your contacts from your Messenger, FB, as well as email.

What exactly did I do?

I made a double-screen video. First part shows the video you were viewing (you have a good taste lmao), and 2nd part shows the recording of your webcam.

exactly what should you do?

Well, I believe, $1900 is a reasonable price for our little secret. You’ll make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).

BTC Address: 1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4
(It is cAsE sensitive, so copy and paste it)

Note:

You have one day in order to make the payment. (I have a specific pixel within this email, and now I know that you have read this message). If I do not receive the BitCoins, I will definitely send your video recording to all of your contacts including close relatives, colleagues, and so on. However, if I do get paid, I’ll destroy the video immidiately. If you want evidence, reply with “Yes!” and I will send your video recording to your 13 friends. It’s a non-negotiable offer, and so do not waste my personal time and yours by replying to this email.

The total received balance of all 25 reported password porn scam variant bitcoin addresses is 4.24466898.

These are all the password porn extortion bitcoin addresses reported as of July 13:

Scam Address # Times Reported Current Balance Total Received # Tx Last Tx
1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4 9 2.50252527 2.8311608 15 2018-07-12 7:17:24
1MQNUSnquwPM9eQgs7KtjDcQZBfaW7iVge 3 0.54043954 0.54043954 2 2018-07-12 4:55:43
1PeMj6hcYMCu1eKUAjRq4t7N6EHwDbGyBR 1 0.4644 0.4644 1 2018-07-12 22:13:40
17drmHLZMsCRWz48RchWfrz9Chx1osLe67 2 0.3053 0.3053 1 2018-07-12 4:31:19
19kQT8RpsNNAM5UQ6RjRxRcHbeHhYf6SES 2 0.06982942 0.06982942 2 2018-07-12 14:27:35
1LEBKnvLEZk2cUfyJ1vU5FpueakWyh4m28 4 0 0.03353922 2 2018-03-12 3:53:05
1AWKTr1vq3946tyuxG7Q1mLcJum4rjnmro 3 0 0 0  
1NLh41sRP8QfSkkBrps1wXQXQhyM86HQYh 3 0 0 0  
1YAy8oEjEXsxos5u7y5k7siJ4tSmA71sU 3 0 0 0  
129WARJw8X71na49fvhss4hRpt9TA6V7Jg 2 0 0 0  
1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx 2 0 0 0  
126RbYy96H9BJZs8kCUAkx5exuiMsYSBbm 1 0 0 0  
15gbv1DTTNg82qvb3cpZLLmfqXu1jJaWFE 1 0 0 0  
19EdHu5QJX5mAQ3fbXnsQ6utCvXDLT4LNG 1 0 0 0  
1A8Ad7VbWDqwmRY6nSHtFcTqfW2XioXNmj 1 0 0 0  
1AgHpx8SbUwLqnzo8WtJYefJqMitM3PKb3 1 0 0 0  
1DULdsSARR1fH6D6DV7otavbmUQka3J9uP 1 0 0 0  
1DVFi6yawViqSsKHhiN81FgGxdNLLkdo7j 1 0 0 0  
1EGG38yAtUPThMMU9Ni15mQ3rWHSk8L2u4 1 0 0 0  
1HNxU93ZWcMJsyosNdpirrkL3mGCJLdUc3 1 0 0 0  
1JsbfAMGSJnKqPHUt4ju373DWQfgpUJQzZ 1 0 0 0  
1L4Vj2hJkrrwRhmfoTjmQ3xFWRP34J1iFr 1 0 0 0  
1LoF9TCF8zcpWeeonp7C4427EWsXsUxKe5 1 0 0 0  
1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx 1 0 0 0  
1PLrSKJmzww51A178UgGukF8bXood9ivaQ 1 0 0 0

***
Help police and deter future frauds by always reporting scam addresses to BitcoinWhosWho.com. Just lookup the bitcoin address and select “Report Scam”.

Blacklist Scam Bitcoin Addresses

All scam reports are accessible by keyword search on our website or from our “Blacklisted Bitcoin Address” API.

The safest place to buy bitcoins is Coinbase.com

Don’t forget to follow us on Twitter and like our page on Facebook.

Leave a Reply

Your email address will not be published. Required fields are marked *

Leave the field below empty!

This site uses Akismet to reduce spam. Learn how your comment data is processed.