"Belarus Phishing Expedition"

[SlapHappy]

simonkozmik,

Yes this is a scam. You were right to ignore and delete the emails.

[wumpy]

Hi all,

I also got that mail yesterday on my work email. Can I assume that theres something like a list just full of company adresses those scammers use?

Email of the scammer: media@maply.net, name "Drury"

Ticket Details
Email: My business email
Camera ready, Notification: 19.12.2017
Status: Waiting for Reply 85xuGaNy3A0f70wNnXmPkC5MrU5ly94Yu8_Priority: Normal
------------------------

Whats up.

I do not want to judge you, but consequently of few occasions, we have touchpoint from now. I dont thing that caress oneself is very ill, but when all your acquaintances see it- its definetly awful.

So, closer to the point. You surfed the website with porn, wich I've seized with the virus. Then you clicked on a video, virus started working and your device became working as dedicated desktop immediately. Naturally, all cams and screen started recording immediately and then my soft collected all contacts from your device.

I message you on this e-mail adress, cuz I got it with my soft, and I make no doubt you for sure control this work e-mai.

As a conclusion- if you want me to delete all this compromising evidence, here is my Bitcoin account adress-
12BdbPL2W8NYTwMrHjeUyz52SdQhAGLd24 (it must be without spaces or =, check it). If you dont know how to make btc transactions, you can ask google or youtube for advice- its very easy. It seems to me, that 290 usd will finish your problem and will destroy our touchpoint perpetuity. You have one day after reading this letter (I put special pixel in it, ill know when you open it.) If you wont finish transactions, ill share the evidence with all contacts I've collected from you.

I dont think cops can find me for only one day(not even 10 days), so think twice, you can lose your honor. Sorry for misprints, I am foreign.

I also did nothing. Just deleted it, blocked the mail via my mail provider. Is it necessary to close my FB account or something? I just got that mail and had no further contact.

regards

[SlapHappy]

You did the right thing in deleting and blocking any further emails. These scammers do nothing with FB, so no need to change anything about your FB account. This is just an unusual type of phishing email compared to most of the other ones that you may have seen.

Your questions are answered in the opening post in green: viewtopic.php?f=20&t=60846

[firefly]

Received from a targeted victim.

Email:

How are you my victim.
I write you on your working e-mail cause we know that you will check it
I'm a member of the team of web criminals in China.
Last month our squad infected your working and home computer and found on them private information which must harm your life and position in society after that we decided to record you (throug your cameras) and your screen, it means that you could do something bad in front of your device... it was vas funny
If you wanna make me silent you have to make a transaction of 310 dollars in bitcoins. you have this sum.

Make a transaction on this btc address - 15a1Dbqw47EcSmruR52JxwzMorx1sgPfac
You must use it as usual credit card number. If we see money We will delete everything about you.

Watch youtube manuals about methods of buing BTC. For example you can buy them at localbitcoins, just find seller in your country or coinbase . com.
If it is impossible for you to buy them in web, try to find comfortable ATM for bitcoin through coin atm radar.
I give you no more than 24 hours since you open the message to finish a transaction (we have put a tracking pixel in it)
Do not try to play with me we use bot network, and ofcourse I do not live in your country.
If you want to see what we have I will show it to 8 your friends then I will give you their links if you want you will ask them if something strange was received about you.
If you have some problems write me back

Good luck,
$ui$ideBunnY squad.

Return-Path: <web36223@srv042210.webreus.net>
Received: from mail-out.webreus.nl (mail-out.webreus.nl [46.235.46.203])
Received: from srv042210.webreus.net (unknown [46.235.42.210])
Subject: Do not spoil your social status/ Letter (CEV)[xxx@xxx.com] from proxy â„–- [737450]
X-PHP-Originating-Script: 36223:infodata.php
From: =?utf-8?B?RXZlbHluIFBldGVyc29u?= <mkc@manz.nl>
Reply-To: de.rede.K.a.n@gmail.com
X-Mailer: PHP/5.5.38
Message-Id: <20171220080726.8E80F1187E0C@srv042210.webreus.net>
Date: Wed, 20 Dec 2017

Originating IP: 46.235.42.210
Originating ISP: Superior B.v.
Country of Origin: Netherlands

[Wayne]

Form received 2017-12-24 08:16:58

What name did the scammer use?: Scarlett Hernandez
Scammer's email address if you have it.: sysadmin@vladteu.org

Scammer's Skype name.: N/A. Was not on Skype
Scammer's Skype username .: N/A
Address of the scammer's FaceBook, Google+ or other social media site page.: N/A
What site/app did you first meet the scammer on? .: Did not meet scammer. Scammer says spyware activated via clicking on page on a porn site
If they asked you to leave the site/app , where did they take you to?: N/A
How much money did they demand?: $320
Name you were told to send the money to.: No name. Just Bitcoin account number
What country/city were you told to send the money to?: Scammer says from Belarus
If they gave you a phone number, please add it here.: N/A
How were you to send the money ?: Bitcoin account 1Pa6ed8S3zpHZcCquiQCaPBPfgHciEYgw6
What steps, if any, have you already taken to block the scammer?: Have not responded to scammer.
Deleted Facebook account
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: I received an email to my work account saying that they had infected my computer with spyware and a keylogger while I was on a porn site. They say they have my contact address list and will send video footage to my contacts unless I pay within 24 hours.

[Wayne]

Form received 2017-12-27 12:23:04

What name did the scammer use?: Charlotte winigun
Scammer's email address if you have it.: sale@vladteu.org

How old did the scammer say they were?: 20
Scammer's Skype name.: Was an email
Scammer's Skype username .: Na
Address of the scammer's FaceBook, Google+ or other social media site page.: Na
How much money did they demand?: Usd360
Name you were told to send the money to.: Bitcoin
What country/city were you told to send the money to?: Belarus

[John12345]

Hi. I was sent an email saying I visited their porn site and activated my webcam and have video of me m***urbating and they will send it to all my contacts unless I pay 480 dollars to a bitcoin account.

They addressed the email to me not just a 'hi' but hello 'John Simpson'. John simpson is not my real name obviously but it was addressed to my real name.

I am really worried. Please help

[SlapHappy]

Joh12345,

Read this topic: viewtopic.php?f=20&t=60846
It is a phishing scam, so ignore the emails, they have nothing of yours.

Post the email that you received from them there in that topic. Please include the email address info.

[John12345]

Hi,
Thanks for the reply. I will fill that out soon but I am freaking out here becaus ethey used my full name in the email and I'm thinking of going tot he police. I am freaked out because I was on pornhub last week and clicked on a video and notice another link appeared aswell and it was webcam. I closed it after a minute or so as I did not realise it was open as I was watching the other video. So I am worried they have video of me.

Please give me as much info as you can as I am in a panic. Are you sure they have no footage of me?? Should I deactivate all my social media?? What will that do?

[SlapHappy]

Sure, you can shut down social media for awhile, but from what we have seen there have been no postings or escalations.
We will know more once we see the email(s) sent to you.

Go to http://blackmailscams.com to get the steps to take.