No more “Hello, My Perverted Friend”?

Checking my spam, I found a wonderful email or two that are worth sharing…. with the subject “I RECORDED YOU”. OMGWTFBBQ!

It’s from “[email protected]” but is being relayed out of Kazakhstan and failing SPF checks – which means most people’s mail services will dump it in spam.

Hi, today I have some sad news for you.
Your device was infected with my private malware.
Your browser wasn’t updated, in this case, it is enough to just visit a website where my iframe is placed to get automatically infected.
If you want to find out more, Google: Drive-by exploit.

An iframe this time? Drive-by exploit? No mention of Pegasus?!!

My malware has given me full access to all your accounts, complete control over your device, and it was also possible to spy on you through your camera.
If you think this is some bad joke, no, I know your password: [a password from 20 years ago]
I collected all your private data and I RECORDED YOU (through your camera) SATISFYING YOURSELF!
After that, I removed my malware to leave no traces, this email was sent from a hacked server.
I can publish the video of you and all your private data on the whole web, the darknet, social networks, over email, and send everything to all your contacts.

The password you quote (I redacted) is from a breach in 2012 for an online shop I used from 1999-2005….in a life before password managers. But do go on……

You can stop me, and only I can help you in this situation.
The only way to stop me is to pay exactly $800 in Bitcoin (BTC).
It’s a very good offer compared to all the horrible things that will happen if I publish everything.
You can easily buy Bitcoin (BTC) here: [link removed]
You can send the Bitcoin (BTC) directly to my wallet, or install the free software: Atomic Wallet or Exodus Wallet, then receive and send to mine.
My Bitcoin (BTC) wallet address is: 1K67dnYSuzJEKQbGWxkPoDvbzfHLF3Lzxs
Yes, that’s how the wallet/address looks, copy and paste it, it’s (cAsE-sEnSEtiVE).
I give you 3 days to pay.

The hyperlink to the wallet shows a zero content at this time. This scam is not going well for you, is it? 3 days to pay?! I won’t be.

Since I have access to this email account, I will know if this email has already been read.
After receiving the payment, I will remove everything, and you can live your life in peace like before.
Don’t worry; I keep my promise!
Next time, make sure that your device has the latest security updates.
ClientMailID: [number]

The email address that the scammer used does not have a mailbox that can be logged into. More hogwash….!

If you’ve arrived here and were a little afraid, don’t be. These are the lessons you should learn:

  • Never use your email address password for anything else
  • Turn on multi-factor authentication
  • If the password in this email is a real one, change it wherever you use it
  • Use a password manager like Bitwarden to manage your passwords

The scammer does not have videos of you and has nothing installed on your computer – but they might have a username (your email address) and a password that they could use to cause you issues.