Blackmail scam
Abuser: Blackmailer
Attacker states they have PW to users email and has implanted trojan on pc which collected pics, URLs etc. Ransom of $900 to BTC acc or collection will be released to contacts. Header: Return-path: <[email protected]> ip=188.162.48.46 (no ptr match); smtp.helo=Smith931.edu (does not exist); Received: from Smith931.edu (client.yota.ru [188.162.48.46]) Received: from [159.62.203.68] by mailout.endmonthnow.com Received: from unknown (HELO nntp.pinxodet.net) by qnx.mdrost.com with NNFMP; Received: from webmail.halftomorrow.com [19.3.69.8] by mtu67.syds.piswix.net with SMTP
United States, 2018-10-29 21:43:36