The Rolex Forums   The Rolex Watch

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX


Go Back   Rolex Forums - Rolex Watch Forum > General Topics > Open Discussion Forum

Reply
 
Thread Tools Display Modes
Old 24 October 2018, 01:36 AM   #1
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
email blackmail attempt

Hi guys,

A couple of days ago I received a scam email as below:


Hello!

My nickname in darknet is kenyon44.
I hacked this mailbox more than six months ago,
through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.

So, your password from *my email address* is *an old password I used to use*

Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.

I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.

I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!

During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!

I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $899 is quite a fair price to destroy the dirt I created.

Send the above amount on my BTC wallet (bitcoin): 1NXNt72qfMhPZDffUEqryCYpEUzyR6LmgH
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.

Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it!

Since reading this letter you have 48 hours!
After your reading this message, I'll receive an automatic notification that you have seen the letter.

I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!


Message ends.

Obviously, I sent no money as I know this is a scam. And equally obviously I would never behave as he is suggesting

I contacted abuse@microsoft.com who want me to send the original email as an attachment so they can examine the message header. Try as I might, I cannot devise a way of attaching the original unopened email to a new email.

I've opened the header and copy-pasted it to a new email, but this is rejected as undeliverable by microsoft's mailbox because it's identified as containing spam.

Can someone please instruct me as to how to attach an unopened Outlook email to a new Outlook email message?
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 02:05 AM   #2
dan993
"TRF" Member
 
Join Date: Mar 2018
Location: Kings Bromley
Posts: 444
Got a similar email detailing an old password. Only problem was my computer is so old it doesn't have a webcam! Just to be clear I have never visited those sites officer
dan993 is offline   Reply With Quote
Old 24 October 2018, 02:09 AM   #3
Knappo 1307
2024 ROLEX DATEJUST41 Pledge Member
 
Knappo 1307's Avatar
 
Join Date: Sep 2011
Real Name: Jason
Location: USA
Watch: Sea Dweller
Posts: 8,557
Can you image if Paul was sent this?
Knappo 1307 is online now   Reply With Quote
Old 24 October 2018, 02:11 AM   #4
SDRider
Banned
 
Join Date: May 2017
Real Name: Julian
Location: San Diego, CA
Watch: Rolex 116613LB
Posts: 1,908
Try to compose a new e-mail and drag the other e-mail into the new one to attach it. If you make the windows smaller you should be able to have both open side by side so you can drag the other file into the new e-mail you are composing.
SDRider is offline   Reply With Quote
Old 24 October 2018, 02:19 AM   #5
superdog
2024 Pledge Member
 
superdog's Avatar
 
Join Date: Oct 2011
Real Name: Seth
Location: nj
Watch: Omega
Posts: 24,697
Received something super similar.

It was disconcerting at first.
__________________
If happiness is a state of mind, why look anywhere else for it?

IG: gsmotorclub
IG: thesawcollection

(Both mostly just car stuff)
superdog is offline   Reply With Quote
Old 24 October 2018, 02:25 AM   #6
sco
"TRF" Member
 
sco's Avatar
 
Join Date: Dec 2013
Location: Chicago
Watch: Subc AT 8500 CSO
Posts: 3,646
This is one of those where someone actually send the cash, and then in six months they are threatened again and again. It's a shame people are so bad sometimes...
sco is offline   Reply With Quote
Old 24 October 2018, 02:26 AM   #7
michaelodonnell123
Banned
 
Join Date: Feb 2017
Real Name: Michael
Location: NJ
Watch: Panerai 112
Posts: 1,172
Pay him 899 Rupees.
michaelodonnell123 is offline   Reply With Quote
Old 24 October 2018, 02:28 AM   #8
TheVTCGuy
Banned
 
Join Date: Jul 2008
Real Name: Paul
Location: San Diego
Watch: 126619LB
Posts: 21,540
Quote:
Originally Posted by Knappo 1307 View Post
Can you image if Paul was sent this?
Wait! You mean I paid $899 for nothing!!!!!!??????
TheVTCGuy is offline   Reply With Quote
Old 24 October 2018, 02:30 AM   #9
brandrea
2024 Pledge Member
 
brandrea's Avatar
 
Join Date: Jul 2013
Real Name: Brian (TBone)
Location: canada
Watch: es make me smile
Posts: 73,704
I got the same email ... guilty as charged
brandrea is online now   Reply With Quote
Old 24 October 2018, 02:36 AM   #10
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
Quote:
Originally Posted by SDRider View Post
Try to compose a new e-mail and drag the other e-mail into the new one to attach it. If you make the windows smaller you should be able to have both open side by side so you can drag the other file into the new e-mail you are composing.
Bingo! Thanks.

However, even doing that results in the message being rejected as undeliverable...



It would be great to nail this lowlife, but it looks like it aint happening.
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 02:47 AM   #11
TheVTCGuy
Banned
 
Join Date: Jul 2008
Real Name: Paul
Location: San Diego
Watch: 126619LB
Posts: 21,540
Here is a question though, they really had your old password? I wonder how they got that?
TheVTCGuy is offline   Reply With Quote
Old 24 October 2018, 02:49 AM   #12
CoveWatch
"TRF" Member
 
CoveWatch's Avatar
 
Join Date: Nov 2017
Location: SoCal
Watch: Rolex & AP
Posts: 4,535
Nice heads up. Have not received it but will be on the lookout now. Thank you!
CoveWatch is offline   Reply With Quote
Old 24 October 2018, 02:53 AM   #13
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
Quote:
Originally Posted by TheVTCGuy View Post
Here is a question though, they really had your old password? I wonder how they got that?
Yep, it was definitely a password I used to use. That was the most unsettling part.

A data breach from a few years ago, I guess. Put your email in the link below, and you'll see.

Data breach, er data, is sold to criminals on the dark web, I gather.

It pays to change your password and keep antivirus up to date.

Even if what he claimed was true, I would never ever pay up. It just leads to further demands for cash if you do.

https://haveibeenpwned.com/
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 02:57 AM   #14
TheVTCGuy
Banned
 
Join Date: Jul 2008
Real Name: Paul
Location: San Diego
Watch: 126619LB
Posts: 21,540
My 85 year old parents are constant targets of scammers; to prey on the elderly is beyond despicible and I have trouble considering the perpitrators human beings. If I could ever get my hands (literally) on one of those that did, I could and would do a lot of bad things with a clear conscious. I don’t want to hear about they are all poor people from India or whatever, I believe in Karma, and when you do bad things then bad things should happen to you.
TheVTCGuy is offline   Reply With Quote
Old 24 October 2018, 02:58 AM   #15
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
Quote:
Originally Posted by CoveWatch View Post
Nice heads up. Have not received it but will be on the lookout now. Thank you!
No problem. It's actually quite a widespread scam.

https://www.mirror.co.uk/tech/phishi...using-12928730
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 02:59 AM   #16
SDRider
Banned
 
Join Date: May 2017
Real Name: Julian
Location: San Diego, CA
Watch: Rolex 116613LB
Posts: 1,908
Quote:
Originally Posted by TheVTCGuy View Post
My 85 year old parents are constant targets of scammers; to prey on the elderly is beyond despicible and I have trouble considering the perpitrators human beings. If I could ever get my hands (literally) on one of those that did, I could and would do a lot of bad things with a clear conscious. I don’t want to hear about they are all poor people from India or whatever, I believe in Karma, and when you do bad things then bad things should happen to you.
I completely agree.
SDRider is offline   Reply With Quote
Old 24 October 2018, 03:00 AM   #17
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
Quote:
Originally Posted by TheVTCGuy View Post
My 85 year old parents are constant targets of scammers; to prey on the elderly is beyond despicible and I have trouble considering the perpitrators human beings. If I could ever get my hands (literally) on one of those that did, I could and would do a lot of bad things with a clear conscious. I don’t want to hear about they are all poor people from India or whatever, I believe in Karma, and when you do bad things then bad things should happen to you.
I couldn't agree more.

Meanwhile, the 48hr deadline for payment has passed, and my wife is complaining that she hasn't yet received any of my juicy secrets!
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 03:40 AM   #18
Carrera911
"TRF" Member
 
Carrera911's Avatar
 
Join Date: Jan 2016
Location: Odessa, FL
Watch: Bluesy (126613LB)
Posts: 570
I have this installed on my webcam:
https://www.amazon.com/Nkomax-Ultra-.../dp/B07BSNH8GH
__________________
Time is the only thing standing between me and the throne ♛
Carrera911 is offline   Reply With Quote
Old 24 October 2018, 03:50 AM   #19
Chiboy
"TRF" Member
 
Chiboy's Avatar
 
Join Date: Aug 2016
Location: Chicago
Watch: Daytona
Posts: 5,384
Since I seldom use FaceTime, I think I’ll put a bit of duct tape on my camera.
__________________
Datejust w/black Tapestry dial (1985) / Daytona (2016)
Chiboy is offline   Reply With Quote
Old 24 October 2018, 05:02 AM   #20
AK797
2024 Pledge Member
 
AK797's Avatar
 
Join Date: Feb 2010
Real Name: Neil
Location: UK
Watch: ing ships roll in
Posts: 59,237
Pay them? If people want to see me in that condition I expect to get paid!

This scam is so common now it was in the papers.
AK797 is offline   Reply With Quote
Old 24 October 2018, 05:09 AM   #21
superdog
2024 Pledge Member
 
superdog's Avatar
 
Join Date: Oct 2011
Real Name: Seth
Location: nj
Watch: Omega
Posts: 24,697
Quote:
Originally Posted by TheVTCGuy View Post
Here is a question though, they really had your old password? I wonder how they got that?
They had my old password too.

One that I had not used in many years.

It’s what messed me up a bit. Before I did some homework and realized it’s a scam.
__________________
If happiness is a state of mind, why look anywhere else for it?

IG: gsmotorclub
IG: thesawcollection

(Both mostly just car stuff)
superdog is offline   Reply With Quote
Old 24 October 2018, 05:54 AM   #22
V25V
2024 Pledge Member
 
V25V's Avatar
 
Join Date: Feb 2017
Location: USA
Posts: 4,340
I got it as well, my webcam is always covered by tape, always has been. Figured it was a scam and quick google confirmed.

https://www.businessinsider.com/new-...bitcoin-2018-7
V25V is offline   Reply With Quote
Old 24 October 2018, 06:06 AM   #23
Sprta
"TRF" Member
 
Sprta's Avatar
 
Join Date: Oct 2017
Location: USA
Posts: 457
This is a crime and should be reported to the FBI internet complaint dept. since they gave their wallet address they can be tracked and caught.
Received a similar email and reported it to both the FBI and my state police.
Sprta is offline   Reply With Quote
Old 24 October 2018, 06:07 AM   #24
rootbeer7
"TRF" Member
 
rootbeer7's Avatar
 
Join Date: Jan 2014
Location: london
Posts: 5,963
I passed mine onto the lady who emailed me from Nigeria who was due to inherit £20billion. I thought together they’d make sweet music.
__________________
@imrootbeer7
rootbeer7 is offline   Reply With Quote
Old 24 October 2018, 06:19 AM   #25
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
Quote:
Originally Posted by Sprta View Post
This is a crime and should be reported to the FBI internet complaint dept. since they gave their wallet address they can be tracked and caught.
Received a similar email and reported it to both the FBI and my state police.
Putting the bitcoin wallet address into google yielded this, inter alia.

https://www.reddit.com/r/AskNetsec/c...this_email_is/

https://www.bitcoinabuse.com/reports...R6LmgH?page=11

One thing I forgot to mention in my OP is that the scam email appeared to come from my own email address (spoofing). You live and learn.

It looks to me like the source of the data breach is good old useless LinkedIn.
rolexpatek363 is offline   Reply With Quote
Old 24 October 2018, 06:20 AM   #26
stockae92
"TRF" Member
 
stockae92's Avatar
 
Join Date: Oct 2009
Location: Socal
Posts: 4,883
Somehow this is the response I have in mind ...

__________________
135
├┼┼╕
246 R
stockae92 is offline   Reply With Quote
Old 24 October 2018, 06:29 AM   #27
bayerische
"TRF" Member
 
bayerische's Avatar
 
Join Date: Nov 2009
Real Name: Andreas
Location: Margaritaville
Watch: Smurf
Posts: 19,879
I've already paid 50K, but this guy keeps sending me these. Should I keep paying him?



__________________
Yeah, well, you know, that's just, like, your opinion, man.
bayerische is offline   Reply With Quote
Old 24 October 2018, 06:36 AM   #28
uscmatt99
"TRF" Member
 
uscmatt99's Avatar
 
Join Date: Aug 2012
Location: Chicago
Posts: 2,031
Thanks for the heads-up and link to the pwned site.
uscmatt99 is offline   Reply With Quote
Old 24 October 2018, 06:38 AM   #29
Baco Noir
"TRF" Member
 
Baco Noir's Avatar
 
Join Date: Dec 2007
Real Name: Roger
Location: Colorado
Watch: this ya'll
Posts: 4,814
Quote:
Originally Posted by bayerische View Post
I've already paid 50K, but this guy keeps sending me these. Should I keep paying him?

Yes, I am still $100k short for the Richard Mille Erotic (Ref RM69) that I have on order! Keep the payments coming or else!
__________________
Current Collection: Rolex 116710BLNR & 216570 polar Explorer II; Omega Apollo 8 Speedmaster; Tudor BB Bronze Bucherer Blue Edition; Heuer Heritage Autavia; Nomos Club Sport Neomatik 42; Breitling Aerospace, Avenger Blackbird, & Superocean 44; Seiko Black Monster; Mickey Mouse Timex Electric; and dare I say it...an Apple Watch too
Baco Noir is offline   Reply With Quote
Old 24 October 2018, 06:48 AM   #30
rolexpatek363
"TRF" Member
 
rolexpatek363's Avatar
 
Join Date: Nov 2017
Location: up a hill
Posts: 1,642
13 people in the past four days have paid so far:

https://bitref.com/1NXNt72qfMhPZDffUEqryCYpEUzyR6LmgH
rolexpatek363 is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Asset Appeal

My Watch LLC

OCWatches

DavidSW Watches

Coronet

Takuya Watches

Bobs Watches


*Banners Of The Month*
This space is provided to horological resources.





Copyright ©2004-2024, The Rolex Forums. All Rights Reserved.

ROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEXROLEX

Rolex is a registered trademark of ROLEX USA. The Rolex Forums is not affiliated with ROLEX USA in any way.