Have I really Been Hacked?

[Bangkok Barry]

 

I have received the following in my spam folder three times recently. It purports to come from my own email address, and when I tried to block the sender I received the message that I cannot block my own email address. I know the content of it is nonsense as it says it has tracked me accessing porn sites, and I have not done so. This person has also given me two days to pay a ransom by bitcoin before 'releasing' videos of me watching porn, but this has been threatened three times over the last couple of weeks or so and so is also clearly nonsense, I'd like to stop these spam emails and have the reassurance that this person does not have access to my email. Any advice would be much appreciated.

The email supposedly sent from my own email address associated with Yahoo, is as follows:

 

Hello!

 

I hacked your device, because I sent you this message from your account.

If you have already changed your password, my malware will be intercepts it every time.

 

You may not know me, and you are most likely wondering why you are receiving this email, right?

In fact, I posted a malicious program on adults (pornography) of some websites, and you know that you visited these websites to enjoy 

(you know what I mean).

 

While you were watching video clips,

my trojan started working as a RDP (remote desktop) with a keylogger that gave me access to your screen as well as a webcam.

 

Immediately after this, my program gathered all your contacts from messenger, social networks, and also by e-mail.

 

What I've done?

I made a double screen video.

The first part shows the video you watched (you have good taste, yes ... but strange for me and other normal people),

and the second part shows the recording of your webcam.

 

What should you do?

 

Well, I think $740 (USD dollars) is a fair price for our little secret.

You will make a bitcoin payment (if you don't know, look for "how to buy bitcoins" on Google).

 

BTC Address: 14DvFghvkzQujf5Kd5AL2VKjxaYm5KidxR

(This is CASE sensitive, please copy and paste it)

 

Remarks:

You have 2 days (48 hours) to pay. (I have a special code, and at the moment I know that you have read this email).

 

If I don't get bitcoins, I will send your video to all your contacts, including family members, colleagues, etc.

However, if I am paid, I will immediately destroy the video, and my trojan will be destruct someself.

 

If you want to get proof, answer "Yes!" and resend this letter to youself. 

And I will definitely send your video to your any 10 contacts.

 

This is a non-negotiable offer, so please do not waste my personal and other people's time by replying to this email.

 

Bye!

Edited April 11, 2019 by Bangkok Barry

[AlexRich]

It’s a scam email. Just ignore it, delete any that land in your inbox. And forget about it.

 

But even if it isn’t, you watching scat and gay porn might go viral, making you an internet sensation. It did wonders for Kim Kardashian and Paris Hilton. Either way, you’re holding a winning hand.

 

Edited April 11, 2019 by AlexRich

[CharlieH]

Been seeing this for over a year now. Typical scamming nonsense email, totally ignore it and delete.

[Stocky]

Yep, a popular spam item.

[Bangkok Barry]

But how is he able to send an email from my email address? I'll also contact Yahoo about it and see how that's been done.

[Bangkok Barry]

1 minute ago, steven100 said:

just ease up on watching those porn sites everyday and the hacker will lose interest in you

 

 

I haven't watched any porn sites. I'm actually looking for constructive and intelligent suggestions from people that are able to read and understand my original post.

[HighPriority]

It’s the result of a data hack, I believe. 

The version I received also included a password that I’m probably too fond of... which initially gave the email a small degree of believability. 

I decided that if my friends and family wanted to watch videos of me wanking they could and I didn’t pay... ????????

it’s just a scam mate. 

 

[CharlieH]

Unhelpful posts removed.

 

You may find this article helpful.

 

https://askleo.com/from_spoofing_how_spammers_send_email_that_looks_like_it_came_from_you/

[topt]

29 minutes ago, Bangkok Barry said:

 

I haven't watched any porn sites. I'm actually looking for constructive and intelligent suggestions from people that are able to read and understand my original post.

This is TVF............

 

As others have said it is a total scam - there was even a thread posted by Nancy l or Sheryl a while ago when they received a similar mail. The scammers spoof your email address which they get from one of the data breaches possibly along with a password. 

 

You can check if your email has ever been in a known hack from here  https://haveibeenpwned.com/

 

If you haven't changed the password in a while maybe also worth doing.

[KneeDeep]

Pease don't ignore it. Play along and drive him mad. I did it to my scammer and in the end he begged me to leave him alone.

I made out I sent the money to Western Union and made him work. When he couldn't work out the secret missing number for receiving the cash, that he would have known had I really been hacked, I told him that the money was returned to me and sent him to MoneyGram instead.

Don't let them off easy.

I stretched it out for days...

Edited April 11, 2019 by KneeDeep

[Bangkok Barry]

7 hours ago, topt said:

This is TVF............

 

As others have said it is a total scam - there was even a thread posted by Nancy l or Sheryl a while ago when they received a similar mail. The scammers spoof your email address which they get from one of the data breaches possibly along with a password. 

 

You can check if your email has ever been in a known hack from here  https://haveibeenpwned.com/

 

If you haven't changed the password in a while maybe also worth doing.

 

That site looks like an advert to me. I'd bet it never ever comes up with a negative result so it can encourage you to pay to use its service - like some rogue antivirus sites have been known to do.

 

The email I received said that it can trace a change of password.

[vinny41]

19 minutes ago, Bangkok Barry said:

 

That site looks like an advert to me. I'd bet it never ever comes up with a negative result so it can encourage you to pay to use its service - like some rogue antivirus sites have been known to do.

 

The email I received said that it can trace a change of password.

There is no payment to use this website

 

Collection 1: More Than 770M People Pwned In Biggest Stolen Data Dump Yet

Troy Hunt, a regional director at Microsoft, is highly respected in the world of cybersecurity research. Not least as he is the driving force behind the popular 'have i been pwned?' (HIBP) site

https://www.forbes.com/sites/daveywinder/2019/01/17/collection-1-more-than-770m-people-pwned-in-biggest-stolen-data-dump-yet/#40009cea509f

[Bangkok Barry]

1 hour ago, vinny41 said:

There is no payment to use this website

 

Collection 1: More Than 770M People Pwned In Biggest Stolen Data Dump Yet

Troy Hunt, a regional director at Microsoft, is highly respected in the world of cybersecurity research. Not least as he is the driving force behind the popular 'have i been pwned?' (HIBP) site

https://www.forbes.com/sites/daveywinder/2019/01/17/collection-1-more-than-770m-people-pwned-in-biggest-stolen-data-dump-yet/#40009cea509f

 

I appreciate your help. and it might well have a prominent name behind it. But it IS a commercial site and leads you on to pay for a service they provide. I have checked several emails of both myself and people that I know, and they ALL come up positive for having been hacked. Quite a coincidence, hmm? And then it offers a free trial, which means they do then charge for their service. The link from CharlieH above has provided peace of mind.

Edited April 12, 2019 by Bangkok Barry

[vinny41]

22 minutes ago, Bangkok Barry said:

 

I appreciate your help. but it leads you on to pay for a service they provide. I have checked several emails via this site, and they ALL come up positive for having been hacked. And then it offers a free trial, which means they do then charge for their service. The link from CharlieH above has provided peace of mind.

The 1password is optional I have have checked an old email address that I used for registering with LinkedIn

LinkedIn: In May 2016, LinkedIn had 164 million email addresses and passwords exposed. Originally hacked in 2012, the data remained out of sight until being offered for sale on a dark market site 4 years later. The passwords in the breach were stored as SHA1 hashes without salt, the vast majority of which were quickly cracked in the days following the release of the data.

Compromised data: Email addresses, Passwords

This email address come up as a postive

I have a different email address now and that one comes up as a negative

to test simply create a new gmail or another email provider and check that email address against the site

If you received a huge amount of spam emails on a daily basis is a good indication that your email address has been sold on

I just made this address up and it come back as a negative

[email protected]

 

Edited April 12, 2019 by vinny41
added txt

[OneMoreFarang]

I work with computers and from time to time I also get these questions of this and that mail is real or not.

And that's fair enough. For some people it's not so easy to recognize them.

But then, if someone ask me if a mail like the following is correct, I wonder if they recognize themselves in that description

 

13 hours ago, Bangkok Barry said:

What I've done?

I made a double screen video.

The first part shows the video you watched (you have good taste, yes ... but strange for me and other normal people),

and the second part shows the recording of your webcam.

 

But then there must be those "strange for me and other normal people" ????

[KneeDeep]

4 hours ago, Bangkok Barry said:

 

I appreciate your help. and it might well have a prominent name behind it. But it IS a commercial site and leads you on to pay for a service they provide. I have checked several emails of both myself and people that I know, and they ALL come up positive for having been hacked. Quite a coincidence, hmm? And then it offers a free trial, which means they do then charge for their service. The link from CharlieH above has provided peace of mind.

 

https://haveibeenpwned.com/Passwords If it suggests that your password has been compromised....change your password.

 

Whilst it suggested that my email address may be on one of the breaches, my password was not.

[HighPriority]

18 minutes ago, KneeDeep said:

 

https://haveibeenpwned.com/Passwords If it suggests that your password has been compromised....change your password.

 

Whilst it suggested that my email address may be on one of the breaches, my password was not.

Have you ever wondered how anti virus companies know so much about viruses...? ????

 

If you actually read the post and information that you’re so suspicious of, the number 770 million might have jumped out at you and could explain why the email addresses you tried “tested positive”. 

Maybe this www site is offering a business service, but so what ?

You get to check for free, if you don’t wish to use their business service, don’t. 

Sometimes you just need to exercise a bit of trust. 

[KneeDeep]

3 minutes ago, HighPriority said:

Have you ever wondered how anti virus companies know so much about viruses...? ????

 

If you actually read the post and information that you’re so suspicious of, the number 770 million might have jumped out at you and could explain why the email addresses you tried “tested positive”. 

Maybe this www site is offering a business service, but so what ?

You get to check for free, if you don’t wish to use their business service, don’t. 

Sometimes you just need to exercise a bit of trust. 

 

 

You need to learn how to use the Quote function. You are quoting the wrong person.

[BMW Overlander]

16 hours ago, Bangkok Barry said:

But how is he able to send an email from my email address? I'll also contact Yahoo about it and see how that's been done.

 

Usually they send from these sites:

 

https://emkei.cz/

 

http://www.anonymailer.net/

[vinny41]

Yahoo Triples Estimate of Breached Accounts to 3 Billion

A massive data breach at Yahoo in 2013 was far more extensive than previously disclosed, affecting all of its 3 billion user accounts, new parent company Verizon Communications Inc. said on Tuesday.

https://www.wsj.com/articles/yahoo-triples-estimate-of-breached-accounts-to-3-billion-1507062804

[Lee4Life]

17 hours ago, Bangkok Barry said:

But how is he able to send an email from my email address? I'll also contact Yahoo about it and see how that's been done.

I had a phone app that hacked my e-mail contact list and then all of my contacts were receiving e-mails that looked like they were from me. I asked a friend that teaches computer in school to help me and he showed me that while the e-mails appeared to be from me they actually were coming from a server in Germany and were not from my e-mail account, we even ran it down to the name on the internet account and the address associated with the account.

I contacted the IP server the guy was using but they refused to help.

[jimn]

You might want to download and scan your computer just to make sure. Spybot is a free spyware and malware search and destroy programme.

 

https://www.safer-networking.org/download/

 

[ujayujay]

Ignore it!

[mauGR1]

19 hours ago, CharlieH said:

Been seeing this for over a year now. Typical scamming nonsense email, totally ignore it and delete.

Yep, i got a similar e-mail a few months ago.

[justin case]

you only have to look at one thing, the original email sending, not on your phone or anything,one that show the source

 

my mother bothers me with this kind of s.hit regulary, I told her to look at real sender e-mail 

[4675636b596f75]

18 hours ago, Bangkok Barry said:

But how is he able to send an email from my email address? I'll also contact Yahoo about it and see how that's been done.

The email wasn't sent from your email address and if you look at the email headers you'll see that that's true. But he is right about one thing, as I've been watching too, your habits are a bit odd to say the least.

[Bangkok Barry]

2 minutes ago, justin case said:

you only have to look at one thing, the original email sending, not on your phone or anything,one that show the source

 

my mother bothers me with this kind of s.hit regulary, I told her to look at real sender e-mail 

 

And how do I do that, when it shows the sender as me and nothing else?

[CH1961]

18 hours ago, KneeDeep said:

Play along and drive him mad. I did it to my scammer and in the end he begged me to leave him alone.

fairy tale ????

[PerkinsCuthbert]

37 minutes ago, 4675636b596f75 said:

The email wasn't sent from your email address and if you look at the email headers you'll see that that's true. But he is right about one thing, as I've been watching too, your habits are a bit odd to say the least.

Yeah, I saw it too. That one with the donkey....

[Lacessit]

What OS are you using? I'll admit to watching a bit of raunchy stuff. However, I'm on Linux or Ubuntu which don't seem to attract hackers. I've never had an email similar to yours.