Abuse to Bitcoin address
1CwTNBNekpV7kDQ7pjF1ghsgqb1CaMq34k

Blackmail scam

Abuser: Subject: Yoúr accoúnt has sígns of hackíng and blockíng.

Shortened to <1K: Dear xxxx, Í have very bad news for yoú. 03/01/2020 - on thís day í hacked yoúr OS and got fúll access to yoúr accoúnt (email address) Íf yoú do not belíeve ít, yoú can check ít yoúrself. Í created thís letter ín yoúr accoúnt (the sender address matches the recípíent address). So, yoú can change the password, yes... Bút my malware íntercepts ít every tíme. How í made ít: Ín the software of the roúter, throúgh whích yoú went onlíne, was a vúlnerabílíty. Í júst hacked thís roúter and placed my malícíoús code on ít. When yoú went onlíne, my trojan was ínstalled on the OS of yoúr devíce. After that, í made a fúll copy of yoúr dísk (í have all yoúr address book, hístory of víewíng sítes, all fíles, phone númbers and addresses of all yoúr contacts).

United States flag United States, 2020-04-10 03:37:08

Ransomware

Abuser: My business email

Asking for ransom and blackmailing to release the data on denial of payment. Claims i am not the only victim.

India flag India, 2020-04-10 04:50:56

Blackmail scam

Abuser: Has my name and email on it

Says he hacked my router and has my adult site history and screenshots and webcam photos...etc

Canada flag Canada, 2020-04-10 13:16:56

Blackmail scam

Abuser: 185.213.170.119 spoofed as recipient email address

Standard "hacked your computer and found porn" message, lots of accented vowels to try to bypass keyword filtering

United Kingdom flag United Kingdom, 2020-04-10 13:52:29

Ransomware

Abuser: E-mail SPAM received

Dear marko, Í have very bad news for yoú. 03/01/2020 - on thís day í hacked yoúr OS and got fúll access to yoúr accoúnt (?@?.com) Íf yoú do not belíeve ít, yoú can check ít yoúrself. Í created thís letter ín yoúr accoúnt (the sender address matches the recípíent address). So, yoú can change the password, yes... Bút my malware íntercepts ít every tíme. How í made ít: Ín the software of the roúter, throúgh whích yoú went onlíne, was a vúlnerabílíty. Í júst hacked thís roúter and placed my malícíoús code on ít. When yoú went onlíne, my trojan was ínstalled on the OS of yoúr devíce.

United States flag United States, 2020-04-10 14:18:42

Blackmail scam

Abuser: Source IP: 77.29.166.178.rev.vodafone.pt[178.166.29.77]

email recieved: And í got an ídea... Í took a screenshot of an adúlt sítes where yoú had fún (yoú únderstand what í mean, ríght?). After that, í took a screenshot of yoúr mastúrbatíon (úsíng the camera of yoúr devíce) and glúed them together. Túrned oút amazíng! Yoú are so spectacúlar! Í'm know that yoú woúld not líke to show these screenshots to yoúr fríends, relatíves or colleagúes. Ít wíll be a húge shame for yoú! Í thínk $1450(USD) ís a very, very small amoúnt for my sílence. Besídes, í have been spyíng on yoú for so long, havíng spent a lot of tíme! Pay ONLY ín Bítcoíns! My BTC wallet: 1CwTNBNekpV7kDQ7pjF1ghsgqb1CaMq34k

United States flag United States, 2020-04-10 14:35:15

Ransomware

Abuser: Yoúr accoúnt has sígns of hackíng and blockíng

Í'm know that yoú woúld not líke to show these screenshots to yoúr fríends, relatíves or colleagúes. Ít wíll be a húge shame for yoú! Í thínk $1450(USD) ís a very, very small amoúnt for my sílence. Besídes, í have been spyíng on yoú for so long, havíng spent a lot of tíme!

Colombia flag Colombia, 2020-04-10 15:18:04

Blackmail scam

Abuser: Email originated from IP 82.42.208.245

Received: from cpc103404-donc13-2-0-cust244.17-1.cable.virginm.net (cpc103404-donc13-2-0-cust244.17-1.cable.virginm.net [82.42.208.245]) Í have very bad news for yoú. 03/01/2020 - on thís day í hacked yoúr OS and got fúll access to yoúr accoúnt Íf yoú do not belíeve ít, yoú can check ít yoúrself. Í created thís letter ín yoúr accoúnt (the sender address matches the recípíent address). So, yoú can change the password, yes... Bút my malware íntercepts ít every tíme. How í made ít: Ín the software of the roúter, throúgh whích yoú went onlíne, was a vúlnerabílíty. Í júst hacked thís roúter and placed my malícíoús code on ít. When yoú went onlíne, my trojan was ínstalled on the OS of yoúr devíce. After that, í made a fúll copy of yoúr dísk (í have all yoúr address book, hístory of víewíng sítes, all fíles, phone númbers and addresses of all yoúr contacts). (.... etc ....) Do not hold evíl! í júst do my job. Have a níce day!

United States flag United States, 2020-04-10 15:21:12

Blackmail scam

Abuser: Source IP 196.86.135.134 (Morocco)

Same old porn scam.

United States flag United States, 2020-04-10 15:24:02

Sextortion

Abuser: 1CwTNBNekpV7kDQ7pjF1ghsgqb1CaMq34k

Received: from client-bsb-138-94-176-239.ti5.net.br (client-bsb-138-94-176-239.ti5.net.br [138.94.176.239])

Romania flag Romania, 2020-04-10 15:35:39

Ransomware

Abuser: spoofed email address

threatened to release information that does not exist in exchange for $1,450

United States flag United States, 2020-04-10 16:39:32

Ransomware

Abuser: Spoofed email address

Í have very bad news for yoú. 03/01/2020 - on thís day í hacked yoúr OS and got fúll access to yoúr accoúnt (email address here) Íf yoú do not belíeve ít, yoú can check ít yoúrself. Í created thís letter ín yoúr accoúnt (the sender address matches the recípíent address).

United States flag United States, 2020-04-10 17:21:32

Blackmail scam

Abuser: Unknown

Í have very bad news for yoú. 03/01/2020 - on thís day í hacked yoúr OS ... So, yoú can change the password, yes... Bút my malware íntercepts ít every tíme. How í made ít: ... Pay ONLY ín Bítcoíns! My BTC wallet: 1CwTNBNekpV7kDQ7pjF1ghsgqb1CaMq34k ... After payment, my vírús and dírty screenshots wíth yoúr mastúrbatíon wíll be self-destrúct aútomatícally. Íf í do not receíve from yoú the specífíed amoúnt, then yoúr devíce wíll be locked, and all yoúr contacts wíll receíve a screenshots wíth yoúr "enjoy". Í hope yoú únderstand yoúr sítúatíon. - Do not try to fínd and destroy my vírús! (All yoúr data, fíles and screenshots ís already úploaded to a remote server); - Do not try to contact me (the sender address matches yoúr address, as I wrote above); - Varíoús secúríty servíces wíll not help yoú; formattíng a dísk or destroyíng a devíce wíll not help, sínce yoúr data ís already on a remote server. ... Do not hold evíl! í júst do my job. Have a níce day!

United States flag United States, 2020-04-10 17:29:49

Sextortion

Abuser: Email Scammer

Sends victim email claiming to have gained access to their computer. Threatens to release information relating to visited websites, etc.

United States flag United States, 2020-04-10 17:32:32

Sextortion

Abuser: Unknown

Uses letters from foreign keyboard that look like American keyboard in hopes that this will bypass spam filter.

United States flag United States, 2020-04-10 17:43:21