Ransomware
Abuser: wakefield73
We have installed one RAT software into you device For this moment your email account is hacked too.
We have installed one RAT software into you device For this moment your email account is hacked too.
We have installed one RAT software into you device For this moment your email account is hacked too. Changed your password? You're doing great! But my software recognizes every such action. I'm updating passwords! I'm always one step ahead....
We have installed one RAT software into you device For this moment your email account is hacked too.
We have installed one RAT software into you device For this moment your email account is hacked too.
Same old bullshit, a black mail scam, stupid bot asking for money, do not send anything.
The usual: We have installed one RAT software into you device For this moment your email account is hacked too. Changed your password? You're doing great! But my software recognizes every such action. I'm updating passwords! I'm always one step ahead....
Usual password ransom dribble
We have installed one RAT software into you device For this moment your email account is hacked too. Changed your password? You're doing great! But my software recognizes every such action. I'm updating passwords! I'm always one step ahead.... So... I have downloaded all confidential information from your system and I got some more evidence. The most interesting moment that I have discovered are videos records where you masturbating. I posted EternalBlue Exploit modification on porn site, and then you installed my malicious code (trojan) on your operation system. When you clicked the button Play on porn video, at that moment my trojan was downloaded to your device. After installation, your front camera shoots video every time you masturbate, in addition, the software is synchronized with the video you choose. Blah, blah, blah...
Fake ransom e-mail from 89.216.22.136
*** PLEASE READ THIS *** guys, when you report the abuser's address there's no point in copying in the name or email address as they are arbitrary (can be anything, easy to fake). please open the source of the email instead (there should be an option for it in every client) and copy in the lowermost IP address or hostname that's not localhost (127.0.0.1) or some internal address (192.168.x.y or 172.16.x.y or 10.x.y.z) if it makes any sense to you. that's far more helpful identifying the origin.
Usual Scammer
We have installed one RAT software into you device For this moment your email account is hacked too. You all know the rest....
another script variant, demanding $600.
Hi, dear user of XXXX.CCC We have installed one RAT software into you device For this moment your email account is hacked too. Changed your password? You're doing great! But my software recognizes every such action. I'm updating passwords! I'm always one step ahead.... So... I have downloaded all confidential information from your system and I got some more evidence. The most interesting moment that I have discovered are videos records where you masturbating.