A new twist on an old trick emerged this week. The porn ransom email claiming to have incriminating video of the recipient which will be released to contacts if not paid in bitcoin, has now included an old compromised password of the recipients in an attempt to add credibility to the scam. Gotta appreciate that dark web creativity. Where did they get all those passwords? The first report of this new variant was received July 10. Since then dozens more reports have come in relating to just over 2 dozen bitcoin addresses as of Friday. This address has been reported 9 times and also has the most total received at 2.83 BTC:
1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4
This is an example of the email text:
I am aware, (Old, Compromised Password), is your password. You do not know me and you are probably thinking why you’re getting this e mail, correct?
actually, I setup a malware on the adult vids (porn material) web site and do you know what, you visited this site to have fun (you know what I mean). While you were watching videos, your web browser started working as a RDP (Remote control Desktop) that has a keylogger which gave me access to your screen and web camera. Right after that, my software program obtained every one of your contacts from your Messenger, FB, as well as email.
What exactly did I do?
I made a double-screen video. First part shows the video you were viewing (you have a good taste lmao), and 2nd part shows the recording of your webcam.
exactly what should you do?
Well, I believe, $1900 is a reasonable price for our little secret. You’ll make the payment by Bitcoin (if you don’t know this, search “how to buy bitcoin” in Google).
BTC Address: 1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4
(It is cAsE sensitive, so copy and paste it)Note:
You have one day in order to make the payment. (I have a specific pixel within this email, and now I know that you have read this message). If I do not receive the BitCoins, I will definitely send your video recording to all of your contacts including close relatives, colleagues, and so on. However, if I do get paid, I’ll destroy the video immidiately. If you want evidence, reply with “Yes!” and I will send your video recording to your 13 friends. It’s a non-negotiable offer, and so do not waste my personal time and yours by replying to this email.
The total received balance of all 25 reported password porn scam variant bitcoin addresses is 4.24466898.
These are all the password porn extortion bitcoin addresses reported as of July 13:
| Scam Address | # Times Reported | Current Balance | Total Received | # Tx | Last Tx |
|---|---|---|---|---|---|
| 1JHwenDp9A98XdjfYkHKyiE3R99Q72K9X4 | 9 | 2.50252527 | 2.8311608 | 15 | 2018-07-12 7:17:24 |
| 1MQNUSnquwPM9eQgs7KtjDcQZBfaW7iVge | 3 | 0.54043954 | 0.54043954 | 2 | 2018-07-12 4:55:43 |
| 1PeMj6hcYMCu1eKUAjRq4t7N6EHwDbGyBR | 1 | 0.4644 | 0.4644 | 1 | 2018-07-12 22:13:40 |
| 17drmHLZMsCRWz48RchWfrz9Chx1osLe67 | 2 | 0.3053 | 0.3053 | 1 | 2018-07-12 4:31:19 |
| 19kQT8RpsNNAM5UQ6RjRxRcHbeHhYf6SES | 2 | 0.06982942 | 0.06982942 | 2 | 2018-07-12 14:27:35 |
| 1LEBKnvLEZk2cUfyJ1vU5FpueakWyh4m28 | 4 | 0 | 0.03353922 | 2 | 2018-03-12 3:53:05 |
| 1AWKTr1vq3946tyuxG7Q1mLcJum4rjnmro | 3 | 0 | 0 | 0 | |
| 1NLh41sRP8QfSkkBrps1wXQXQhyM86HQYh | 3 | 0 | 0 | 0 | |
| 1YAy8oEjEXsxos5u7y5k7siJ4tSmA71sU | 3 | 0 | 0 | 0 | |
| 129WARJw8X71na49fvhss4hRpt9TA6V7Jg | 2 | 0 | 0 | 0 | |
| 1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx | 2 | 0 | 0 | 0 | |
| 126RbYy96H9BJZs8kCUAkx5exuiMsYSBbm | 1 | 0 | 0 | 0 | |
| 15gbv1DTTNg82qvb3cpZLLmfqXu1jJaWFE | 1 | 0 | 0 | 0 | |
| 19EdHu5QJX5mAQ3fbXnsQ6utCvXDLT4LNG | 1 | 0 | 0 | 0 | |
| 1A8Ad7VbWDqwmRY6nSHtFcTqfW2XioXNmj | 1 | 0 | 0 | 0 | |
| 1AgHpx8SbUwLqnzo8WtJYefJqMitM3PKb3 | 1 | 0 | 0 | 0 | |
| 1DULdsSARR1fH6D6DV7otavbmUQka3J9uP | 1 | 0 | 0 | 0 | |
| 1DVFi6yawViqSsKHhiN81FgGxdNLLkdo7j | 1 | 0 | 0 | 0 | |
| 1EGG38yAtUPThMMU9Ni15mQ3rWHSk8L2u4 | 1 | 0 | 0 | 0 | |
| 1HNxU93ZWcMJsyosNdpirrkL3mGCJLdUc3 | 1 | 0 | 0 | 0 | |
| 1JsbfAMGSJnKqPHUt4ju373DWQfgpUJQzZ | 1 | 0 | 0 | 0 | |
| 1L4Vj2hJkrrwRhmfoTjmQ3xFWRP34J1iFr | 1 | 0 | 0 | 0 | |
| 1LoF9TCF8zcpWeeonp7C4427EWsXsUxKe5 | 1 | 0 | 0 | 0 | |
| 1PdRsvWnRwz7m8nViajQNjcAzgQgEiTBhx | 1 | 0 | 0 | 0 | |
| 1PLrSKJmzww51A178UgGukF8bXood9ivaQ | 1 | 0 | 0 | 0 |
See Also:
SEXTORTION EMAIL SCAM VARIANT MAKES 22.67BTC OVER FIRST 3 WEEKS – July 26, 2018
BITCOIN PORN BLACKMAIL SCAM MOVED TO POLONIEX WALLET– June 2, 2018
BITCOIN PORN BLACKMAIL SCAM REPORTS SURGE– March 12, 2018
***
Help police and deter future frauds by always reporting scam addresses to BitcoinWhosWho.com. Just lookup the bitcoin address and select “Report Scam”.
All scam reports are accessible by keyword search on our website or from our “Blacklisted Bitcoin Address” API.
The safest place to buy bitcoins is Coinbase.com
Don’t forget to follow us on Twitter and like our page on Facebook.
The main question is, did the blackmailer really make the video and have they really accessed the victim’s computer?
The answer is no and no
I got the same message and don’t have a webcam. There’s also no remote image in the email, as he claims.
I got one today and the clown was asking for $948.00.
I got the same Email, the bitcoinadress is
1FhDyFCE9VQ7J1SrApnnw4LUsvn5JhqMFv
I received one today BTC address: 1PivHJ8BeoYWEo3snpZHH42nmx7WaPGivg
Slightly different wording but the same deal.
I’ve received one of these emails today – Bitcoin address 19UuZPkVjWu86gbH8stN9SaN5HNwQeDqTy
I’ve tried to report it as a scam but the form asks for a website address and I don’t know what I’m expected to enter there; there isn’t a website address for this.
I leave it blank
16PA5qm6rm6icmWw8QCT7a9Bhi4jjYLeye is another scammer – received a scammed email with demand for $1900 payment for supposedly hacking “my wrongdoings” and with subject in the email with my old password, threatening otherwise to “expose me to my friends”
Got a very similar email here, with another bitcoin address:
1CF2rXnfaD4oh2sJDaH2qFCQz12xFgYCFp
Note, they try to mask it with an asterisk like this:
1CF2*rXnfaD4oh2sJDaH2qFCQz12xFgYCFp
I got the same email and the address is
1FPQyZHryNadvGgGorg7C6JvsZdCVvRQFg
I received one from Michel Kitchin (nmreliasxd@outlook.com)…same BS….bitcoin address 19sDkKfzcAo*qXcn58ULmE57YGR1odifnXc . How do you stop these cons!!??
Porn email ransom BS
bitcoin address 19sDkKfzcAoqXcn58ULmE57YGR1odifnXc
original bitcoin address has * in it 19sDkKfzcAo*qXcn58ULmE57YGR1odifnXc
Fake name Michel Kitchin as scammer stated
Same, but they wanted $2900. Apparently I’m worth more.
1EHnT7Ay5oRbMsS5wv997RpwhpWH4YAGrE
14qxuC4sxb2PPoesGTRpAtJvxZhvs7M9Qp
And he only wanted $1000! WTF! I have more money than that! LOOK AT MY BANK ACCOUNT!
18*ewF8wuucCKRJ4M9cqC9PTpakyeDExgk6
1FFijY6tBgcLc5WpRP5sQiP5w63dDWetxF, asking for
Asked me for $5000.00
From Lynelle Flint
I’ve been blackmailed on the 30/07 for $2900 from : 1JpqbZYZSAvc1nDiirkgg823AXk2b458d7
Robert Cravens
got similiar e-mail today from “edmundo orsi” ztashleyplf@outlook.com
bitcoin
1JzQq3NMbak*dijH97Tpn9AxWTZCKuuGsWd
asking 2.250 $
can’t put it in the scam (doesn’t work) , any one for me? tx
I received one from “Byron King” – received a scammed email with demand for $2600 payment. send it to 1A9nEG3vbuMDeZ4nRPpAN4GVQhovdVGM1R. Supposedly discovering “my misdemeanors” and with subject title in the email was my windows password, threatening otherwise to “expose me to my friends” and the video of me watching these sex sights.
Got mine 2 days ago. Bitcoin address: 1BNFCP2fE1DX9pf7D4Z1AXfkw7E3CmVsmj
1KHxoawJ3yAHNU1KdPKjZua8y6QY22ZoK1
Same scam
Mine is 1Bb446YF8AZK3nKchPJQ3J5KwPGRHRARJ5 asking for 1000 $. How to get rid of… change email or just ignore … this is the 3rd run for me there are 2 or 3 they go away for a few months then try again. Now I read them for entertainment value, it is less annoying that way.
Got one with Bitcoin address: 17JhhBEBj5wzaCZy6gUjA5qJcqwgTLAB8g
I reported it to the FBI and replied back to the scammer including the FBI link: https://www.ic3.gov/complaint/default.aspx
and the law: https://www.law.cornell.edu/uscode/text/18/875
I got one on Aug 3rd but actually only saw it yesterday. Same email with an old password. They demanded $8050
1EzpBt31QP7r8y6kxiDhGEXZ2BNWKchto1
I am well aware bunnymomma is your password. Lets get straight to the purpose. You may not know me and you are probably wondering why you are getting this e mail? There is no one who has compensated me to check you.
actually, I setup a software on the X streaming (porn) website and guess what, you visited this website to experience fun (you know what I mean). While you were viewing videos, your internet browser initiated working as a RDP having a keylogger which provided me with accessibility to your screen as well as webcam. Just after that, my software program collected all your contacts from your Messenger, social networks, as well as e-mail . After that I created a double-screen video. First part displays the video you were viewing (you have a nice taste lmao), and second part displays the view of your web cam, & its you.
You do have 2 alternatives. We will review the solutions in details:
1st solution is to ignore this e mail. In that case, I will send out your very own video recording to every single one of your personal contacts and then just imagine regarding the embarrassment you will get. And likewise should you be in an intimate relationship, exactly how it would affect?
2nd alternative would be to pay me $7000. Lets describe it as a donation. As a result, I will quickly erase your video recording. You can continue everyday life like this never occurred and you will not ever hear back again from me.
You will make the payment through Bitcoin (if you don’t know this, search for “how to buy bitcoin” in Google).
BTC Address: 1QCLNFEHYdYnwq6CvomMN8Nmqij8zf3TAg
[case sensitive so copy and paste it]
In case you are looking at going to the police, look, this email message can not be traced back to me. I have taken care of my steps. I am just not trying to demand much, I would like to be rewarded.
You now have one day in order to make the payment. I’ve a unique pixel within this e mail, and now I know that you have read through this message. If I do not receive the BitCoins, I will send out your video recording to all of your contacts including family members, colleagues, and so forth. Having said that, if I do get paid, I will destroy the recording right away. If you want to have evidence, reply with Yea & I will certainly send your video to your 5 contacts. This is the non:negotiable offer so don’t waste mine time and yours by responding to this message.
Just so you know, in my opinion, the person who wrote this letter is Russian. I have over two decades working with people from around the world. I won’t give away how I know. It may be a helpful clue to someone. Good luck.
This showed up in my junk email
The password provided is a password from an online merchant that I purchased something from years ago.
$7000
18xknJXkd3CiTzps8vG1ojn6WH46UHtDCM
John
G’day I’m from Australia an received this yesterday… They didn’t have my proper email address and it went into my SPAM Folder.
XXXXXX (old password) is your pass. Lets get right to the purpose. You may not know me and you’re most likely thinking why you are getting this e mail? Not one person has paid me to investigate about you.
Let me tell you, I setup a malware on the adult videos (pornography) website and do you know what, you visited this web site to have fun (you know what I mean). When you were viewing videos, your internet browser initiated functioning as a Remote control Desktop that has a key logger which provided me access to your display screen and also web camera. after that, my software collected all of your contacts from your Messenger, Facebook, as well as email account. Next I created a video. 1st part shows the video you were watching (you have a nice taste ; )), and next part shows the view of your cam, yea its you.
You get two options. We will analyze these solutions in particulars:
1st solution is to just ignore this message. In this case, I most certainly will send your actual tape to every single one of your contacts and also just think concerning the humiliation you can get. And as a consequence if you happen to be in an intimate relationship, how this will affect?
2nd solution would be to compensate me $2000. Lets refer to it as a donation. Then, I most certainly will immediately eliminate your videotape. You could keep your daily ro utine like this never occurred and you surely will never hear back again from me.
You will make the payment by Bitcoin (if you don’t know this, search for “how to buy bitcoin” in Google).
BTC Address to send to: 1DukwTSC6dN837wCrfLMU8m5kWZZGfZTGM
[CASE-SENSITIVE, copy and paste it]
If you have been looking at going to the law, well, this e-mail can not be traced back to me. I have taken care of my moves. I am not trying to charge a fee very much, I wish to be paid.
You have one day in order to pay. I’ve a specific pixel within this e-mail, and at this moment I know that you have read this e-mail. If I don’t get the BitCoins, I will, no doubt send out your video recording to all of your contacts including friends and family, co-workers, and so on. Nonetheless, if I do get paid, I’ll destroy the recording right away. If you want evidence, reply with Yes! and I definitely will send your video recording to your 8 contacts. It is a nonnegotiable offer, therefore don’t waste my personal time and yours by replying to this message.
Three new addresses:
1BoXxc5d7uunE8spVcsQ7cPtkeCaVxLF8p
139Fgp17ynEBzT1DHTqfyY5nMCctynoZkX
1KFzuvjgfqZpanBVg5x92SsfKkjq5cJG4p
They want $3000
All using a password that is about five years old or older.
17gikapD2VEirb2W7W5WTHg2NkyiXJ2ttn
I got sextortion email today. I’m only worth $770 in bitcoin
The email I received did NOT include my email address.
I received this same email almost word for word today at work, 1KSK459MipoUdNuToRpEFf1HTFhmD6jTvP
https://www.blockchain.com/btc/address/1DzM9y4fRgWqpZZCsvf5Rx4HupbE5Q5r4y
I got a similar asking 700.00 today.
I don’t have an account here so I can not report my scam. Login is required.
BTC address: 1PivHJ8BeoYWEo3snpZHH42nmx7WaPGivg
1Lughwk11SAsz54wZJ3bpGbNqGfVanMWzk
Just wanted to add this to the list. Got it twice. They significantly lowered their demand after I ignored the first one, lol.
1BJD1YwXutwfVX184LEoa2AqSgC6ZGSRKR
1Q6aaY6KxAqmzyA1bK9q3smu6x3veRDtLh
From ‘Buck Melville’ uhxjaniceac@outlook.com account. Asking for $8k.
I found where the users got emails and password. This was from a LinkedIn hack that happened a couple of years ago.
I just got one yesterday.
1KR21qxegDxUYypniJt6vZqAoDN9DiZ46U
Same scam:
1D7TANutbYDP5huzU3DxGcVhkz5GtreUSR
I suspect the password came from the Uber hack in 2016.
I got it today:
BTC address: 1GpnBwGKcbhewzD2fPTVxeQYdAQphTcrcG
Sent to my company email, but the password was not one I’ve ever used. Here is the BTC address:
135qVXXBZb3v2tQcLJRA8UAndiUYNybh3J
Received similar email today containing hacked old password. If you care to spend more than 5 seconds on this garbage you can trace the email, which led me to St. Petersburg, Russia of course. the long/lat coordinates might have put him at the city library as the email was delivered from a static IP:
https://whatismyipaddress.com/trace-email
Wallet in question is:
15FsDaUnH9YfHQ1W5n36iPJnhtU8Km2cax
Website associated with the email was fdfirefightertees.com
I received one today.
BTC Purse: 1Abx4ytuJ2Mb5HtuCpbUuUuJ1q8cdrXXYT
I received one today. Not quite the same wording but in a similar vein asking me for $929
1FF2wjexfHHiiuWwaA6dSEeA4WzAb4ezjU
I just receive similiar e-mail on October 31. They want 857
Bit Wallet account is: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP
I received similiar demand e-mail requestin $857 bitcoin paiment. Wallet Account was 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP
I’ve been ignoring emails demanding bitcoin since July 2018.
The emails are getting longer (more wordy) but the amount they demand has been going down. 1st was over 2K, today it’s under 1K. The password they hacked is a fake one that I use on sites I’m not sure of or will never visit again. Here is their bitcoin account:
1LwibmKAKu4kt4SvRLYdUP3aW7vL3Y78zL
Here is another dumbass
1LHbcbyJPT1us4iG2j1zkBDzKN3kho5ssq
Wanted $7000
Another one
1H9bS7Zb6LEANLkM8yiF8EsoGEtMEeLFvC
I’m only worth $797!
Another one
1DUC3zwchoNJXTSrbi7eRvLHq6Hig3TJNn
I got this too.
1E6J4jsUgWXJaZnehxYEBQsF8g4e4z7uKo
Glad I’ve got my webcam taped over so I could be confident they were lying…
I got one saying I had 3 days to pay and they only wanted around 800 dollars.
I have no idea what the password was actually for, I don’t recognise it but they found my facebook account and linked it to the email, hence they got my name, but only as it’s displayed on facebook, not my full name.
Hello (my name)
I have very bad news for you.
I’m a hacker who cracked your email and device a few months ago.
You entered a password on one of the sites you visited, and I intercepted it.
This is your password from (my email)@hotmail.com on moment of hack: ov7781
So, you can change the password, yes.. But my malware intercepts it every time.
How I made it:
In the software of the router, through which you went online, was a vulnerability.
I just hacked this router and placed my malicious code on it.
When you went online, my trojan was installed on the OS of your device.
After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).
A month ago, I wanted to lock your device and ask not for a big amount of btc to unlock.
But I looked at the sites that you regularly visit, and I was shocked by what I saw!!!
I’m talk you about sites for adults.
I want to say – you are a BIG pervert. Your fantasy is shifted far away from the normal course!
And I got an idea….
I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?).
After that, I made a screenshot of your joys (using the camera of your device) and glued them together.
Turned out amazing! You are so spectacular!
I know that you would not like to show these screenshots to your friends, relatives or colleagues.
I think $850 is a very, very small amount for my silence.
Besides, I have been spying on you for so long, having spent a lot of time!
Pay ONLY in Bitcoins!
My BTC wallet: 1CNBNdh9QAveCcRPipbFVNBTj6UuX56JwQ
You do not know how to use bitcoins?
Enter a query in any search engine: “how to transfer money to a bitcoin wallet”.
It’s extremely easy.
For this payment I give you 3 days (72 hours).
As soon as this letter is opened, the timer will work.
After payment, my virus and dirty screenshots with your enjoys will be self-destruct automatically.
If I do not receive from you the specified amount, then your device will be locked, and all your contacts will receive a screenshots with your “enjoys”.
Also I’ll post all images on your facebook account facebook.com/(myname)
I hope you understand your situation.
– Do not try to find and destroy my virus! (All your data, files and screenshots is already uploaded to a remote server)
– Do not try to contact me (you yourself will see that this is impossible, the sender address is automatically generated)
– Various security services will not help you; formatting a disk or destroying a device will not help, since your data is already on a remote server.
P.S. You are not my single victim. so, I guarantee you that I will not disturb you again after payment!
This is the word of honor hacker
I also ask you to regularly update your antiviruses in the future. This way you will no longer fall into a similar situation.
Do not hold evil! I just do my job.
Good luck (my name)!
Click here only after you make the payment !
These people are not hackers, they cant hack their way out of a bag made of air! they are like the bugs that eat the dried up roadkill after the real animals get the fresh meat! they are nothing short of chancers! no skills at all!
i got this too
BTC Address: 1H1QQUWaEwqp81zw839aCdgCuDHWqRPPa9
15puprndQDNt6VCR3Q8srH2mRpnNwcJUMo
next one
Got one with Bitcoin address:
18ewszNHfQXzz9Lswz9zVdwjbuZJh2rLkT
I also got this kind of message a few weeks ago but I just laughed at it and marked the email as SPAM. I wasn’t surprised getting this kind of scam/blackmail since I am into cryptocurrencies since 2013 and I was SCAMMED twice! I could no longer recover the website as it says on the landing page of their site that the site is for sale. I lost US$300,000 worth of bitcoins back then. I hope I am wiser now.