Abuse to Bitcoin address
1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH

Ransomware

Abuser: 1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH

[french:] Message en anglais (25 janvier 2021) utilisant ma propre adresse e-mail pour m'écrire en prétendant avoir accès total à mon ordinateur et enregistrement de mes activités webcam. Réclame une rançon en bitcoins. Ne surtout pas payer. C'est du bluff. Ces gens sont des criminels. Combien de suicides et autres désastres suite à leurs méfaits ?! [message reçu:] Hi! As you may have noticed, I sent you an email from your account. This means that I have full access to your account. I’ve been watching you for a few months now. The fact is that you were infected with Njrat through an adult site that you visited. If you are not familiar with this, I will explain. Njrat gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use. If you want to prevent this, transfer the amount of 950 USD to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”). My bitcoin address (BTC Wallet) is: 1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH After receiving the payment, I will delete the video and you will never hear me again. I give you 48 hours to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Best regards!

Belgium, 2021-01-30 18:24:03

Blackmail scam

Abuser: E-Mail spoofing über envioclubes.com.ar

Hallo! Wie Sie vielleicht bemerkt haben, habe ich eine E-Mail von Ihrem Konto gesendet. Dies bedeutet, dass ich vollen Zugriff auf Ihr Konto habe. Ich habe dich seit ein paar Monaten beobachtet. Tatsache ist, dass Sie über eine von Ihnen besuchte Website für Erwachsene mit Njrat infiziert wurden. Wenn Sie damit nicht vertraut sind, werde ich erklären. Njrat gibt mir vollen Zugriff und Kontrolle über einen Computer oder ein anderes Gerät. Das heißt, ich kann alles auf Ihrem Bildschirm sehen, die Kamera und das Mikrofon einschalten, aber das wissen Sie nicht. Ich habe auch Zugriff auf alle Ihre Kontakte und Ihre gesamte Korrespondenz. Ich habe ein Video gemacht, das zeigt, wie zufrieden Sie in der linken Hälfte des Bildschirms sind, und in der rechten Hälfte sehen Sie das Video, das Sie gesehen haben. Mit einem Mausklick kann ich dieses Video an alle Ihre E-Mails und Kontakte in sozialen Netzwerken senden. Ich kann auch den Zugriff auf alle von Ihnen verwendeten E-Mail- und Messenger-Korrespondenz veröffentlichen. Wenn Sie dies vermeiden möchten, Überweisen Sie den Betrag von 950 USD an meine Bitcoin-Adresse (wenn Sie nicht wissen, wie das geht, schreiben Sie an Google: "Bitcoin kaufen"). Meine Bitcoin-Adresse (BTC-Brieftasche) lautet: 1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH Nach Zahlungseingang lösche ich das Video und Sie werden nie wieder von mir hören. Ich gebe Ihnen 48 Stunden zu bezahlen. Ich habe eine Warnung beim Lesen dieses Briefes und der Timer funktioniert, wenn Sie diesen Brief sehen. Das Registrieren einer Beschwerde irgendwo macht keinen Sinn, da diese E-Mail nicht als meine Bitcoin-Adresse verfolgt werden kann. Ich mache keine Fehler. Wenn ich herausfinde, dass Sie diese Nachricht mit jemand anderem geteilt haben, wird das Video sofort verteilt. Schöne Grüße!

Switzerland, 2021-02-02 23:57:51

Blackmail scam

Abuser: Spoofed my email

The usual message - has compromising video will publish if no payment received.

United Kingdom, 2021-02-09 08:06:08

Sextortion

Abuser: No name: I am a professional coder and I hacked your device's OS

Received: from EUR01-HE1-obe.outbound.protection.outlook.com (104.47.0.52) ... Authentication-Results: spf=none (sender IP is 146.185.78.135) ... Received-SPF: None (protection.outlook.com: mx2.alpstein-server.ch does not designate permitted sender hosts) Received: from v102.alpstein-server.ch (146.185.78.135) by AM5EUR02FT047.mail.protection.outlook.com (10.152.9.197) with Microsoft SMTP Server (version=TLS1_2, Received: from 146.185.78.135 (unknown [87.237.54.197]) (Authenticated sender: [email protected]) From: <[email protected]> To: <[email protected]> Subject: NOTIFICATION Date: Mon, 8 Feb 2021 18:19:14 -0800 Message-ID: <[email protected]> ... I am a professional coder and I hacked your device's OS when you visited adult website. Now I have all your contacts, sm data and all logs from chats for the latest 2 months but it is not very useful without something that can spoil your reputation... I can destroy your life by sending this stuff to everybody you know. If you want me to delete this stuff and avoid any problems you have to send $1200 to my bitcoin address: 1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH Don't try to respond because this email address is generated. Don't try to complain because this and my bitcoin address can't be tracked down. If I notice that you shared this message everybody will receive your data. Bye!

Serbia, 2021-02-09 09:14:32

Sextortion

Abuser: Spoofed Email

I am a professional coder and I hacked your device's OS when you visited adult website. I've been watching your activity for a couple of months..........................

United Kingdom, 2021-02-09 10:01:21

Sextortion

Abuser: "hacker" with "malware" and a "recording"

Received: from 146.185.78.135 (unknown [87.237.54.197]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: [email protected]) by v102.alpstein-server.ch (Postfix) with ESMTPSA id 82F2D70476 for <...>; Tue, 9 Feb 2021 05:27:23 +0100 (CET)

United States, 2021-02-09 15:52:35

Sextortion

Abuser: spoofed

same as others

Canada, 2021-02-16 05:51:40

Ransomware

Abuser: Came from my email address

Same as everyone else wanted $950 in 48 hours or ‘footage’ would be sent to all my contacts.

United Kingdom, 2021-02-18 16:42:45

Ransomware

Abuser: Unknown

Typical ransomware

United States, 2021-02-19 07:51:53

Sextortion

Abuser: Unknown, feked email as from me or ReturnPath: [email protected]

Received: from EUR02-HE1-obe.outbound.protection.outlook.com (104.47.5.52) by exc2013.informatika.com (10.1.7.9) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Frontend Transport; Sat, 20 Feb 2021 17:08:43 +0100 Received: from AM6P193CA0137.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:85::42) by DB7PR10MB2332.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:4b::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.27; Sat, 20 Feb 2021 16:08:41 +0000 Received: from AM5EUR02FT031.eop-EUR02.prod.protection.outlook.com (2603:10a6:209:85:cafe::c3) by AM6P193CA0137.outlook.office365.com (2603:10a6:209:85::42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.27 via Frontend Transport; Sat, 20 Feb 2021 16:08:41 +0000 Authentication-Results: spf=pass (sender IP is 198.136.56.50) ... Subject: NOTIFICATION : I have full access to your computer & other device. Return-Path: [email protected] Hi! I have full access to your computer & other device. I’ve been watching you for a few months now. ... transfer the amount of 950 USD to my bitcoin address ... My bitcoin address (BTC Wallet) is:

Serbia, 2021-02-20 18:24:32

Sextortion

Abuser: Indian scammer?

Thank you so much everyone for this site. Got a bit concerned for a second. Horrible people, hope they go to hell. Such a shame the Bitcoin address has shown 3 payments received. I was scammed via Amazon last year so I believe that’s how they might of got my information. Contact your email provider if still in doubt I.e Microsoft they can probably confirm if your account has been compromised. Guess I’ll find out in 48hrs lol. Probably Indian scumbag scammers

United Kingdom, 2021-02-21 23:10:39

Ransomware

Abuser: spoofed as my own e-mail address

Same description as others have stated. Hi! I have full access to your computer & other device. I’ve been watching you for a few months now. The fact is that you were infected with Njrat through an adult site that you visited. If you are not familiar with this, I will explain. Njrat gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use. If you want to prevent this, transfer the amount of 950 USD to my bitcoin address (if you do not know how to do this, write to Google: “Buy Bitcoin”). My bitcoin address (BTC Wallet) is: 1F4rKqQ5PVeFKFzKRQYpik7iCXixV6vokH After receiving the payment, I will delete the video and you will never hear me again. I give you "48 hours" to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Best regards!

United States, 2021-02-26 21:38:08

Ransomware

Abuser: Spoof

Sextorsion

United States, 2021-03-08 13:57:17

Ransomware

Abuser: Unknown

Ransom blackmail. Same as others

United States, 2021-07-25 16:48:00