Sextortion
Abuser: Return-Path: - IP 177.200.160.182 - ISP provider: Net Flex Ltda (Brazil)
Same as other reports.
Portugal, 2019-03-09 21:29:09Same as other reports.
Portugal, 2019-03-09 21:29:09Usual stupid phishing scam about having caught porn activity and threatening to email all contacts. Received in US on 3/7/19 at 10:34 EST
United States, 2019-03-09 22:01:56The e-mail isn't sent from yourself. It's sent from Pires do Rio in Brazil. It looks like they tried to hide themselves as Indians.
Norway, 2019-03-10 20:36:08Same as other reports - porn blackmail
United States, 2019-03-11 16:03:46I have been receiving blackmail threats by this Bitcoin user. I am a Kali Linux user, all my emails are encrypted. And I am over very secure VPN. There is no way that they can hack my computer. Besides I do not watch porn. Whoever is [email protected] will not get anything from me!
United States, 2019-03-12 08:53:27Claims evidence of accessing PORN sites using email address - wants $1000 within 2 days or will contact all email addresses hacked.
Poland, 2019-03-12 10:41:06Fucking idiot! Seriously ? 6395227587@mydomain ??? Get a fucking life you fucking moron!
United Kingdom, 2019-03-12 16:04:09'Hacked' email disguised to look like it came from my own email address. Inspection of the header/source info came from listed email address. Asked for 1000USD be deposited into this wallet. If not done in 2 days, all of my contacts would receive the video of me from my 'webcam' which I don't have. Some of the source info included without my personal email address below: Return-Path: <[email protected]> Delivered-To: <<my email address>> Received: from bospopproxy08.eigbox.net ([10.20.15.14]) by bospop23.eigbox.net with LMTP id UBhPAhCrh1wTHQAAQBUXlQ for <<my email address>>; Received: from bosmailscan14.eigbox.net ([10.20.15.14]) by bospopproxy08.eigbox.net with LMTP id OKIPAhCrh1yNLAAAS4IIjw; Tue, 12 Mar 2019 08:50:24 -0400 Return-path: <[email protected]> Envelope-to: <<my email address>> Delivery-date: Tue, 12 Mar 2019 08:50:24 -0400 Received: from [10.115.3.13] (helo=smtp.maileig.com) by bosmailscan14.eigbox.net with esmtp (Exim) id 1h3grP-0000Fw-S0
United States, 2019-03-12 16:54:59Wants 1000$, letter as usual.
Germany, 2019-03-14 13:17:39Ransom scam asking for $1000. Sent email with a spoofed 'From' header claiming to be from my own email account. Claims to have hacked my computer and threatens to send a 'compromising' email to my entire contact list. Excerpt of mail headers here: Errors-To: [email protected] Received: from server.orensoftserver.com (server.orensoftserver.com [162.144.61.104]) by spool.mail.gandi.net (Postfix) with ESMTPS id 87F6F74005E for <REDACTED>; Wed, 13 Mar 2019 20:52:57 +0000 (UTC) Received: from [200.163.75.6] (port=50374 helo=[200.203.144.63.brasiltelecom.net.br]) by server.orensoftserver.com with esmtpsa (TLSv1:ECDHE-RSA-AES256-SHA:256) (Exim 4.91) (envelope-from <[email protected]>) id 1h3Sli-0004Lp-Ke for REDACTED; Mon, 11 Mar 2019 17:47:52 -0400 Source appears to be from Brazil, or it could be the sending machine is just part of a botnet. I reported the abuse to orensoft.
Canada, 2019-03-14 15:14:41Blackmail scam of hacking email, keylogger, and dual-record of porn video and webcam. Send $1000 in 48h or will send to all contacts. Email address from header metadata is [email protected]
United States, 2019-03-14 16:38:24give me 1000USD or (something about porn and embarrassing me or something)
United States, 2019-03-15 00:58:27Asking for "1000 USD" again. Pretending to have hacked my computer, threatens to send video of me to all my contacts. This time sent an image of his threat instead of text, maybe to try to thwart reporting of his Bitcoin address.
United States, 2019-03-15 19:00:20START : Your account has been hacked ... bl bl bl $1000 US is reasonable, etc etc etc
United States, 2019-03-15 22:00:38Blackmail scam with spoofed header attempting to collect $1000 or share info/video/porn to all contacts.
United States, 2019-03-16 02:26:32