Abuse to Bitcoin address
31sm6A7N8LjYVE5cToXPAyMjP6MFnLdYsT

Sextortion

Abuser: [email protected] (spoofed)

Claims to have hacked email account

Germany, 2019-09-24 09:04:30

Ransomware

Abuser: [email protected]

A hacker asking for money stated he had access to the computer and will release sex videos

France, 2019-12-12 23:48:23

Ransomware

Abuser: new phobos

installs itself deep into a Windows system, starts an executable named 1system.exe which cyphers all files on all drives which are not protected. For each file an e-mail address and an id is appended, and the file extension bekomes "*.calum". The ransomware blocks taskmanager and file explorer, it installs itself into "scheduled tasks" e.g. as defragmentation task and many other, it installs itself as a background service. It shows some message on the screen

Ukraine, 2020-01-12 11:00:36