Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!



"Belarus Phishing Expedition"

Scammers blackmailing people over webcam footage or photographs. Sometimes referred to as "sextortion". Your first port of call should be www.blackmailscams.com for the steps needed.

Re: "Belarus Phishing Expedition"

Unread postby daisy » Sat Oct 27, 2018 7:35 pm

new one for me today as well , new bitcoin ref

I will not do this if you pay me a little amount.
I think $829 is a nice price for it!

I accept only Bitcoins.
My BTC wallet: 1PL9ewB1y3iC7EyuePDoPxJjwC4CgAvWTo



Received: from unknown (HELO [41.60.235.247]) ([41.60.235.247])
by as5.telkomsa.net with ESMTP; 27 Oct 2018 05:32:42 +0200
Date: 27 Oct 2018 07:55:41 +0200
From: <>
X-Priority: 3
Message-ID: <105378311.201810270832@telkomsa.net>

Note: Eight people paid. The highest amount paid by a single victim was little over $900.


IP Address 41.60.235.247
Decimal Representation 691858423
ASN AS30844
City
Country Kenya
Country Code KE
ISP Real Time Technologies Alliance - Africa
Latitude 1.0000° (1° 0′ 0″ N)
Longitude 38.0000° (38° 0′ 0″ E)
Organization Liquid Telecommunications Kenya

Note: 22 payments done between 27-29 October. Total value until October 29: $11k. 3 new victims paid on October 29 and 30.
daisy
Senior survivor
 
Posts: 188
Joined: Sun Sep 02, 2018 11:17 pm

Re: "Belarus Phishing Expedition"

Unread postby daisy » Sat Oct 27, 2018 7:41 pm

another one... same wording, different price:
Therefore, I expect payment from you for my silence.
I think $862 is an acceptable price for it!

Pay with Bitcoin.
My BTC wallet: 1YnYAxprVrTo1WzPPzMo86ste5Ssp4xsy


Header:
Return-Path: riana.f@telkomsa.net
Received: from unknown (HELO [103.231.162.134]) ([103.231.162.134])
by as10.telkomsa.net with ESMTP; 22 Oct 2018 16:52:00 +0200
From: <>
To: ">
Subject: I'm crack
Date: 23 Oct 2018 01:34:52 +0500


IP Address 103.231.162.134
Decimal Representation 1743233670
ASN AS59362
City Dhaka
Country Bangladesh
Country Code BD
ISP KS Network Limited
Latitude 23.7290° (23° 43′ 44″ N)
Longitude 90.4112° (90° 24′ 40″ E)
Organization KS Network Limited

Note: Seven victims paid between October 22 - 24. Total value until October 29: $3754.
daisy
Senior survivor
 
Posts: 188
Joined: Sun Sep 02, 2018 11:17 pm

Re: "Belarus Phishing Expedition"

Unread postby daisy » Sat Oct 27, 2018 7:44 pm

another one...:
Therefore, I expect payment from you for my silence.
I think $800 is an acceptable price for it!

Pay with Bitcoin.
My BTC wallet: 1YnYAxprVrTo1WzPPzMo86ste5Ssp4xsy


Header:
Received: from dynamic.pool-31-44-75-247.abissnet.al ([31.44.75.247])
by as5.telkomsa.net with ESMTP; 22 Oct 2018 16:47:36 +0200
Message-ID: <935055995536301394397935@telkomsa.net>
From: <>
To: "t>
Subject: I'm crack
Date: 22 Oct 2018 17:12:33 +0100

=

IP Address 31.44.75.247
Decimal Representation 522996727
ASN AS35047
City Tirana
Country Albania
Country Code AL
ISP Abissnet sh.a.
Latitude 41.3275° (41° 19′ 39″ N)
Longitude 19.8189° (19° 49′ 8″ E)
Organization Abissnet sh.a.
Postal Code
Is Private IP Address no
PTR Resource Record dynamic.pool-31-44-75-247.abissnet.al

[Total collected up to nov.1 = 3745.81 USD.]
daisy
Senior survivor
 
Posts: 188
Joined: Sun Sep 02, 2018 11:17 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Sun Oct 28, 2018 9:15 pm

Today's offering:

I will not do this if you pay me a little amount.
I think $895 is a nice price for it!

I accept only Bitcoins.
My BTC wallet: 17XHRucfd4kx3W5ty7ySLGiKHqmPUUdpus

IP: 190.234.16.55
ISP: Telefonica del Peru
Organization: Telefonica del Peru
Continent: South America
Country: Peru
State/Region: Lima
City: Lima

Note: 10 victims paid between 28 and 30 of October. Total value: $6800.
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Wed Oct 31, 2018 1:20 pm

Change your password XXXXXX immediately. Your account has been hacked.

I greet you!

I have bad news for you.
06/28/2018 - on this day I hacked your operating system and got full access to your account XXXXXX@romancescambaiter.com On that day your account (XXXXXX@romancescambaiter.com) password was: XXXXXX

It is useless to change the password, my malware intercepts it every time.

How it was:
In the software of the router to which you were connected that day, there was a vulnerability.
I first hacked this router and placed my malicious code on it.
When you entered in the Internet, my trojan was installed on the operating system of your device.

After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to lock your device and ask for a small amount of money to unlock.
But I looked at the sites that you regularly visit, and came to the big delight of your favorite resources.
I'm talking about sites for adults.

I want to say - you are a big pervert. You have unbridled fantasy!

After that, an idea came to my mind.
I made a screenshot of the intimate website where you have fun (you know what it is about, right?).
After that, I took off your joys (using the camera of your device). It turned out beautifully, do not hesitate.

I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.
I think $979 is a very small amount for my silence.
Besides, I spent a lot of time on you!

I accept money only in Bitcoins.
My BTC wallet: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP

You do not know how to replenish a Bitcoin wallet?
In any search engine write "how to send money to btc wallet".
It's easier than send money to a credit card!

For payment you have a little more than two days (exactly 50 hours).
Do not worry, the timer will start at the moment when you open this letter. Yes, yes .. it has already started!

After payment, my virus and dirty photos with you self-destruct automatically.
Narrative, if I do not receive the specified amount from you, then your device will be blocked, and all your contacts will receive a photos with your "joys".

I want you to be prudent.
- Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)
- Do not try to contact me (this is not feasible, I sent you an email from your account)
- Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.

P.S. I guarantee you that I will not disturb you again after payment, as you are not my single victim.
This is a hacker code of honor.

From now on, I advise you to use good antiviruses and update them regularly (several times a day)!

Don't be mad at me, everyone has their own work.
Farewell.

IP: 43.224.195.37
ISP: Office des Postes et des Telecomm. de Nouvelle Cal
Organization: Office des Postes et des Telecomm. de Nouvelle Cal
Continent: Oceania
Country: New Caledonia
State/Region: South Province
City: Noumea

IP: 109.242.83.119
ISP: Wind Hellas Telecommunications SA
Organization: Tellas S.A.
Continent: Europe
Country: Greece
State/Region: Attica
City: Athens

Note: No payments done so far ...[/b]

Update nov.1: 6 victims paid total of 4700.49 USD
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Thu Nov 01, 2018 1:12 pm

Got it in Japanese today.

こんにちは!

私は数ヶ月前にあなたの電子メールとデバイスをクラックしたハッカーです。
あなたが訪問したサイトの1つにパスワードを入力君た。それを傍受しました。

もちろん、それを変更したり、すでに変更したりすることができます。
しかし、それは問題ではありません、私のマルウェアは毎回それを更新しました。

私に連絡したり、私を見つけようとしないでください。それは不可能です。 私はあなたのアカウントからメールをあなたに送ったので、

あなたの電子メールを介して、私はあなたのオペレーションシステムに悪質なコードをアップロードしました。
私は友人、同僚、親戚とのあなたの連絡先のすべてを保存し、インターネットリソースへの訪問の完全な履歴を保存しました。
また、あなたのデバイスにトロイの木馬をインストールしました。

あなたは私の唯一の犠牲者ではない、私は通常、デバイスをブロックし、身代金を求める。
しかし、私は頻繁に訪れる親密なコンテンツのサイトにショックを受けました。

私はあなたの幻想にショックを受けている! 私はこれのようなものを見たことがない!

だから、あなたがサイトで楽しむとき(あなたは私が何を意味するか知っています!)
あなたのカメラのプログラムを使用してスクリーンショットを作成しました。
その後、私はそれらを現在閲覧されているサイトのコンテンツに結合しました。

これらの写真を連絡先に送信すると素晴らしいことがあります。
しかし、あなたがそれを望んでいないと確信しています。

したがって、私は沈黙のためにあなたからの支払いを期待しています。
私は$899が良い価格だと思います!

Bitcoin経由で支払う。
私のBTCウォレット: 1DbTMUuhB1XPJ2ktxKygDbrXypGofuHhq6

あなたがこれを行う方法を知らない場合 - Googleに「BTCウォレットに送金する方法」を入力します。 難しくない。
指定された金額を受け取ると、妥協しているすべての材料は自動的に破壊されます。私のウイルスはあなた自身のオペレーティングシステムからも削除されます。

私のトロイの木馬は自動アラートを持っています。私はこのメールを読んだ後でメッセージを受け取ります。

私はあなたに支払いのための2日間を与える(正確に48時間)。
これが起こらない場合 - すべてのあなたの連絡先はあなたの暗い秘密の生活からクレイジーショットを取得します!
あなたが妨害しないように、あなたのデバイスはブロックされます(また、48時間後)

ばかなことしないで!
警察や友人はあなたを確実に助けません...

p.s. 私はあなたに将来のアドバイスを与えることができます。 安全でないサイトにはパスワードを入力しないでください。

私はあなたの慎重さを願っています。
お別れ。

IP: 31.166.227.217
ISP: Mobily
Organization: Etihad Etisalat
Continent: Asia
Country: Saudi Arabia
State/Region: Makkah Province
City: Jeddah

Second one has these details:

I will not do this if you pay me a little amount.
I think $814 is a nice price for it!

I accept only Bitcoins.
My BTC wallet: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP

IP: 31.202.115.118
ISP: Maxnet Telecom, Ltd
Organization: Maxnet LLC, Kharkiv
Continent: Europe
Country: Ukraine
State/Region: Kharkivs'ka Oblast'
City: Kharkiv
=

Update nov.1: 6 victims paid total of 4700.49 USD
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Thu Nov 01, 2018 1:15 pm

Hello!

I'm a programmer who cracked your email account and device about half year ago.
You entered a password on one of the insecure site you visited, and I catched it.
Your password from XXXXXX@scamsurvivors.com on moment of crack: XXXXXX

Of course you can will change your password, or already made it.
But it doesn't matter, my rat software update it every time.

Please don't try to contact me or find me, it is impossible, since I sent you an email from your email account.

Through your e-mail, I uploaded malicious code to your Operation System.
I saved all of your contacts with friends, colleagues, relatives and a complete history of visits to the Internet resources.
Also I installed a rat software on your device and long tome spying for you.

You are not my only victim, I usually lock devices and ask for a ransom.
But I was struck by the sites of intimate content that you very often visit.

I am in shock of your reach fantasies! Wow! I've never seen anything like this!
I did not even know that SUCH content could be so exciting!

So, when you had fun on intime sites (you know what I mean!) I made screenshot with using my program from your camera of yours device.
After that, I jointed them to the content of the currently viewed site.

Will be funny when I send these photos to your contacts! And if your relatives see it?
BUT I'm sure you don't want it. I definitely would not want to ...

I will not do this if you pay me a little amount.
I think $867 is a nice price for it!

I accept only Bitcoins.
My BTC wallet: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP

If you have difficulty with this - Ask Google "how to make a payment on a bitcoin wallet". It's easy.
After receiving the above amount, all your data will be immediately removed automatically.
My virus will also will be destroy itself from your operating system.

My Trojan have auto alert, after this email is looked, I will be know it!

You have 2 days (48 hours) for make a payment.
If this does not happen - all your contacts will get crazy shots with your dirty life!
And so that you do not obstruct me, your device will be locked (also after 48 hours)

Do not take this frivolously! This is the last warning!
Various security services or antiviruses won't help you for sure (I have already collected all your data).

Here are the recommendations of a professional:
Antiviruses do not help against modern malicious code. Just do not enter your passwords on unsafe sites!

I hope you will be prudent.
Bye.

IP: 68.63.151.186
ISP: Comcast Cable
Organization: Comcast Cable
Continent: North America
Country: United States
State/Region: Pennsylvania
City: Pottstown
=

Update nov.1: 6 victims paid total of 4700.49 USD
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Thu Nov 01, 2018 5:10 pm

Two more!

I accept only Bitcoins.
My BTC wallet: 1BzkoGfrLtL59ZGjhKfvBwy47DEb6oba5f

IP: 92.49.194.144
Organization: 2Day Telecom
Continent: Asia
Country: Kazakhstan
State/Region: Astana Qalasy
City: Astana



I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.
I think $988 is a very small amount for my silence.
Besides, I spent a lot of time on you!

I accept money only in Bitcoins.
My BTC wallet: 1FF2wjexfHHiiuWwaA6dSEeA4WzAb4ezjU


IP: 167.0.33.241
ISP: Movistar Colombia
Organization: Movistar Colombia
Continent: South America
Country: Colombia
State/Region: Departamento de Norte de Santander
City: Cúcuta

[Nov. 1: 4 payments made totaling 2594.24USD]

Update: Nov 3: 7 payments made totaling 5368.76 USD
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby Wayne » Fri Nov 02, 2018 12:17 pm

Today's so far:

I think $841 is a very small amount for my silence.
Besides, I spent a lot of time on you!

I accept money only in Bitcoins.
My BTC wallet: 17vzpL7n29egdeJF1hvUE4tKV81MqsW4wF

IP: 121.179.71.106
ISP: Korea Telecom
Organization: Korea Telecom
Continent: Asia
Country: Republic of Korea
State/Region: Jeollanam-do
City: Naju

[Nov 2: 3 payments made totaling 2539.38 USD]

Update: Nov.3 : 9 payments made totaling 6866.90 USD
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58347
Joined: Mon Apr 16, 2012 5:13 pm

Re: "Belarus Phishing Expedition"

Unread postby daisy » Fri Nov 02, 2018 1:59 pm

another one for me...

I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.
I think $981 is a very small amount for my silence.
Besides, I spent a lot of time on you!

I accept money only in Bitcoins.
My BTC wallet: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP


Return-Path:
Received: from cordelia.lb1.telkomsa.net (LHLO cordelia.telkomsa.net)
(192.168.222.61) by mail9.telkomsa.net with LMTP; Wed, 31 Oct 2018 13:32:21
+0200 (SAST)
Received: from as1.telkomsa.net (unknown [196.25.211.210])
by cordelia.telkomsa.net (Postfix) with ESMTPS id 871AB16004A
for >; Wed, 31 Oct 2018 13:32:21 +0200 (SAST)
Received: from 100.74.116.3.hathway.com ([116.74.100.3])
by as1.telkomsa.net with ESMTP; 31 Oct 2018 13:32:19 +0200
Message-ID: <004101d4713b$0564e26a$3b44769e@alhursi>
From: <>
To: ">
Subject: Change your password immediately. Your account has been hacked.
Date: 31 Oct 2018 20:26:16 +0400


IP Address 116.74.100.3
Decimal Representation 1951032323
ASN AS17488
City Surat
Country India
Country Code IN
ISP Hathway
Latitude 20.9667° (20° 58′ 0″ N)
Longitude 72.9000° (72° 54′ 0″ E)
Organization Hathway
Postal Code 395007
Is Private IP Address no
PTR Resource Record 100.74.116.3.hathway.com
Is Reserved IP Address no
State Gujarat
State Code 09
Timezone Asia/Calcutta

Update: 15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP
19 payments made between 10/31 and 11/02 toaling 15520.15 USD.
daisy
Senior survivor
 
Posts: 188
Joined: Sun Sep 02, 2018 11:17 pm

PreviousNext

Return to Blackmail/Sextortion - www.blackmailscams.com

Who is online

Users browsing this forum: Google [Bot] and 39 guests