Abuse to Bitcoin address
13WVfQkbqdsSUNBDPDWTLqSXeaYX1tZ6UD

Ransomware

Abuser: 87.123.239.8

wants $920. Received-SPF: None (mailfrom) identity=mailfrom; client-ip=87.123.239.8; helo=i577bef08.versanet.de; [email protected];

Morocco, 2020-05-04 05:46:16

Ransomware

Abuser: dinamic-tigo-191-95-135-166.tigo.com.co

pseudo hacker wants $920. Received-SPF: None (mailfrom) identity=mailfrom; client-ip=191.95.135.166; helo=dinamic-tigo-191-95-135-166.tigo.com.co; [email protected];

Morocco, 2020-05-04 05:49:21

Ransomware

Abuser: 196.200.45.63.wananchi.com

wants $920. Received-SPF: None (mailfrom) identity=mailfrom; client-ip=196.200.45.63; helo=196.200.45.63.wananchi.com; [email protected];

Morocco, 2020-05-04 05:51:30

Ransomware

Abuser: 37-19-107-58.dynamic.vipmobile.rs

Received-SPF: None (mailfrom) identity=mailfrom; client-ip=37.19.107.58; helo=37-19-107-58.dynamic.vipmobile.rs; [email protected];

Morocco, 2020-05-04 05:53:28

Ransomware

Abuser: 186.224.73.61

Same as other ones from Brazil. Received-SPF: None (mailfrom) identity=mailfrom; client-ip=186.224.73.61; helo=61.73.224.186.dipelnet.com.br; [email protected];

Morocco, 2020-05-04 05:55:50

Ransomware

Abuser: 105.184.48.236

Received-SPF: None (mailfrom) identity=mailfrom; client-ip=105.184.48.236; helo=48-184-105-236.north.dsl.telkomsa.net; [email protected];

Morocco, 2020-05-04 05:58:19

Ransomware

Abuser: 213.30.20.45

Received-SPF: None (mailfrom) identity=mailfrom; client-ip=213.30.20.45; helo=45.20.30.213.rev.vodafone.pt; [email protected];

Morocco, 2020-05-04 06:00:11

Ransomware

Abuser: 213.30.20.45

Received-SPF: None (mailfrom) identity=mailfrom; client-ip=213.30.20.45; helo=45.20.30.213.rev.vodafone.pt; [email protected];

Morocco, 2020-05-04 06:02:53

Blackmail scam

Abuser: Many spoofed addresses. Please STOP exposing innocent individual addresses!

Subject: H¡gh level of r¡sk. Your account has been hacked. Change yøur passwørd.

Sweden, 2020-05-04 07:34:08

Sextortion

Abuser: [email protected]

H¡gh level of r¡sk. Your account has been hacked. Change yøur passwørd.

Australia, 2020-05-04 08:53:41

Sextortion

Abuser: [email protected]

Received: from 194-96-152-246.hdsl.highway.telekom.at (194-96-152-246.hdsl.highway.telekom.at [194.96.152.246])

Spain, 2020-05-04 10:03:50

Sextortion

Abuser: hacker attempt saying they watched my webcam

part of the email "You can șay: thîș îș my, but old pașșword! Or: î can change my pașșword at any tîme! Of courșe! You wîll be rîght, but the fact îș that when you change the pașșword, my malîcîouș code every tîme șaved a new one! Î've been watchîng you for a few monthș now. The fact îș that you were înfected wîth malware through an adult șîte that you vîșîted. "

United Kingdom, 2020-05-04 10:39:17

Sextortion

Abuser: [email protected]

Hello! Î am a hacker who haș acceșș to your operatîng șyștem. Î alșo have full acceșș to your account. Thîș meanș that î have full acceșș to your devîce: At the tîme of hackîng your account... etc etc

United Kingdom, 2020-05-04 10:44:02

Ransomware

Abuser: 93.79.206.230

H¡gh level of r¡sk. Your account has been hacked. Change yøur passwørd.

China, 2020-05-04 10:54:32

Sextortion

Abuser: Spoofed emails

2 emails with the same text although asking for different amounts $950 and $920 but same bitcoin. The usual “I’ve hacked your OS” and have all your passwords- the password quoted hasn’t existed for over 3 years and was taken from a pwned site

United Kingdom, 2020-05-04 11:16:53