Just got this from some mook ...

[marble falls]

Donald Brooks
To:xxxxxxxxxxxxxx
Sat, Nov 14 at 10:24 PM

I know crabcake is one of your password on day of hack..


Lets get directly to the point.

Not one person has paid me to check about you.
You do not know me and you're probably thinking why you are getting this email?
in fact, i actually placed a malware on the adult vids (adult porn) website and you know what, you visited this site to experience fun (you know what i mean).
When you were viewing videos, your browser started out operating as a RDP having a key logger which provided me with accessibility to your display and web cam.

immediately after that, my malware obtained every one of your contacts from your Messenger, FB, as well as email account.

after that i created a double-screen video. 1st part shows the video you were viewing (you have a nice taste omg), and 2nd part displays the recording of your cam, and its you.

Best solution would be to pay me $1097.


We are going to refer to it as a donation. in this situation, i most certainly will without delay remove your video.



My -BTC -address : 1FY1ThoyRHozCRkXiwzZVm9yTyYJvkh5ML

[case SeNSiTiVe, copy & paste it]


You could go on your life like this never happened and you will not ever hear back again from me.

You'll make the payment via Bitcoin (if you do not know this, search 'how to buy bitcoin' in Google).


if you are planning on going to the law, surely, this e-mail can not be traced back to me, because it's hacked too.

I have taken care of my actions. i am not looking to ask you for a lot, i simply want to be paid.


if i do not receive the bitcoin;, i definitely will send out your video recording to all of your contacts including friends and family, co-workers, and so on.
Nevertheless, if i do get paid, i will destroy the recording immediately.


If you need proof, reply with Yeah then i will send out your video recording to your 8 friends.


it's a nonnegotiable offer and thus please don't waste mine time & yours by replying to this message.




I've gotten these from someone at Pinterest. "Crabcake" is a password I used one place: Pinterest. I've closed that account. All of my serious account have generated passwords that are changed regularly at irregular intervals. I don't "do" porn, I do not have any contact lists, I have an FB account under another name with a generated password often changed at irregular intervals with no personal information (I use it to see my FB addicted daughters accounts), my camera has been taped over for since I bought it four years ago as are all my computers have been for years.

I would so dearly love to smack this ass on the nose, but I will NOT click anywhere on this PoS post.


Any ideas??? Is there some way I can identify him from the bitcoin drop he linked???

This is about the seventh or eighth one of these I've gotten since I opened that Pinterest account.

Extra points for creativity!

[dweller]

1. Yeah

...


✌🏻

[Karadeniz]

2. Wow! I've never had such a thing!

[marble falls]

11. It's weird, other than the fake PayPal, Yahoo and Amazon notices I don't get much crap in my ...

... e-mail and these started during the three or so months I was on Pinterest last winter- spring. They come in batches at one or two-month intervals and all on the same day.

But I get it: if I leave them alone, my spam account sweeps them up about 90%.

[brush]

3. It's a bluff. Delete and don't worry about it.

[marble falls]

4. Not worried a bit, looking for a way to bump back.

[TheBlackAdder]

5. There's a bunch of YouTube guys that hack and expose these scammers. Never pay.

.

You could try reaching out to one of them for advice.

Jim Browning is the best. Kitboga & ScammerRevolts are great too.

===

Once you pay, your name gets sold to a bunch of other scammers and you'll be in for a world of hurt.

.

[marble falls]

13. I have no need to pay: I don't do porn, I don't keep contact lists, my cameras are all disabled.

If I bit coined the bunch I just received I'd be out $8000.00. Let alone this is the third time. Funny how all these different would be blackmailers all use the same letter.

I just want to tweek them back.

[TheBlackAdder]

16. If you Patreon Jim Browning, he might sting them, waste their time, divulge their operation.

.

It depends on how far you want to take it.

If you view the raw email source in your email application, you should get the source IP address. There is a high probability if you perform a command prompt nslookup ipaddress that it might show an aws host name. Most scams are using Amazon Web Services. You can set up an account with AWS for free and report each of the spams you get from one of their domains and they will shut them down.

.

[marble falls]

23. Dang Adder! You're even sharper about more stuff than I thought! ...

... more than this old geezer computer truck driver is capable of doing in any sort of competent manner.

Amazon is a fucking monster. They'll be selling a service to prevent this crap next. Bezos makes the '90's Bill Gates and Michael Dell seem saints.

[TheBlackAdder]

27. While only Amazon knows who starts these spammers, the URL they link to can be looked up.

.

I found that there were a bunch of the domains with the same postal address. I looked up that address and it turned out to be coming from one of those mall mailbox stores, which had another store location in a dilapidated mini strip mall. I contacted the mailbox manager and sent him the scam information and said, "Hey, do you know that there's a scammer running an operation from your mailbox locations?" They were shut down.

Then, I contacted the Hosting Service that had around 100 of these domain names. I sent the same thing, they came back and said that they just manage the domains and they have nothing to do with how they are used. But, within a few weeks, they were all gone.

See, most of these scammers want the free domains or the $1 domains, but they don't want to pay the privacy costs to keep their ownership information out of the public registration database. While it will be registered to some company, they need to provide a mailing address and contact information. Some of them won't provide that information, it will be blank. I go to ICANN and report those domains for not supplying that information, then those owners will be contacted and they have a month to update those records or their domain gets pulled.

.

[Hortensis]

25. That last especially seems well worth knowing. Guessing

Amazon's program would do the domain check automatically on any spam reported to it, and perhaps report back on those not through them.

[Renew Deal]

6. Here's the story on that

https://krebsonsecurity.com/2018/07/sextortion-scam-uses-recipients-hacked-passwords

You cannot identify him/her from the bitcoin address. Also, this scam is so widespread, you'd probably never be able to pin it to one person.

You might want to check the email address you used for pinterest on this site: https://haveibeenpwned.com It will tell you where your password probably leaked from.

[cos dem]

7. I got one of these on my work computer.

Even if I did online porn (I don't), I'm not stupid enough to do it on a work account.

I forwarded it to our email security team. They said not much they could do about it, but it was a hoax and not to worry about it.

[Bev54]

8. Not sure what to do but I received one of these about 6 mos ago

I have always taped my camera over and do not watch porn. The password they gave me was one I used at least 10 years ago on a couple of unimportant sites, not on pinterest so not sure where they got it. I would like to have done something too but decided my best choice was to just delete it.

[marble falls]

14. My story exactly.

[LSFL]

9. Pervert, eh?

Jk. Notice he only knew a one off password as "proof". Wouldn't the names of your contacts compel you to cooperate more? He doesn't have them. Ignore him. I have gotten similar messages and I don't have any active cams on any of my devices. " I will show your friends and family vids of you whacking your tater" What a joke. A random website pw would not give him access to your device in any case. He deserves to be hunted down and destroyed but there is little you can do.
HOWEVER...If you could track down this would be black mailer , you should roofie him and let him awaken with a size 12 poop chute while you urinate on him screaming "HOUSE ON FIRE, HOUSE ON FIRE!"

Props to an early SNL Will Ferrell .

[moonscape]

10. I got a variation of this, saying they had

hacked me and had me masturbating via my webcam. The email started with a password I had used ages ago before I worried about secure passwords for trivial sites. Also wanted bitcoin but was a lot meaner sounding than your email. Must’ve been a Trumper.

I didn’t have a webcam (deliberate) and had even configured my HP business notebook not to include one. Still, that they had even that trivial password unnerved me. A little poking around made me less concerned because the password was so old, was bought cheap from old password list hacks. How old was it? Back when I used ‘budapest’. Hey! Stop laughing. Beats ‘password’. Okay, so it doesn’t ...

There are so many of these going around that they’re just spam at this point.

[chowder66]

12. People are reporting this to the FTC since April

https://www.consumer.ftc.gov/blog/2020/04/scam-emails-demand-bitcoin-threaten-blackmail

I googled the following;

"Lets get directly to the point. Not one person has paid me to check about you. You do not know me and you're probably thinking why you are getting this email?"

I don't think there is much you can do to trace the senders. Like spam, these can be added to an algorithm that spams people and cycles through lists of addresses. It will probably go away at some point and it could cycle back again in the future. Just delete them and/or report them.

[FM123]

17. I keep hearing more and more of these stories.

If you receive an email and it worries you, you can report it to your company's IT department or local police -- who are well-aware of these scams. You can also report the emails to the FBI's IC3.
https://www.cnbc.com/2019/06/17/email-sextortion-scams-on-the-rise-says-fbi.html

[Silent3]

18. I've seen spam just like this, but the guesses at my passwords have all been wrong

I've ignored this BS, and nothing has ever come of it.

I wonder if grifters like this aren't simply sending out so much spam that by shear luck they'll sometimes correctly guess someone's password, and scare them that way, without actually having hacked a damned thing. There are lists of the most commonly used passwords available (if you're using one of them, you're using a stupid password!), so someone could get a lot of results just sending millions of people emails with passwords randomly chosen from such a list.

[eppur_se_muova]

19. I've instinctively avoided Pinterest. They make you get an account to look at anything.

I've avoided giving away any personal info about myself, so that put them off limits from the start.

[eppur_se_muova]

20. Do sysadmins maintain the accounts postmaster@ and abuse@ anymore ?

I tried contacting Microsoft at one of these addresses one time and never got an answer, so maybe it's all ancient history now.

[roamer65]

21. Yeah. I got one 2.

I just deleted it.

[womanofthehills]

22. My neighbor got a very similar email yesterday

All these bad things would happen to her online if she didn't send 39 cents in Bitcoin. There is no 39 cents in Bitcoin. I think one Bitcoin was in the thousands today.

[GoCubsGo]

24. I got a couple of those recently--in my SPAM folder.

The fact that they wound up in the SPAM folder tells you all you need t know. I just changed my password. For stuff like Pinterest, I keep an old Yahoo and g-mail addresses. I don't include any other personal information, because of shit like this.

[Tracer]

26. Worse than your threatening stalker...

Twice, for weeks at a time, someone used my email address to send disgusting messages to random people.

Then these poor people would email ME and call me awful names for "sending them" the prurient messages.

I have no idea how the nasty sender got my email address, it's not a common one.

[marble falls]

30. Off someone else's hacked e-mail contact list. Keep no online contact lists.

[MineralMan]

28. Just delete it. It's bogus.

[marble falls]

33. It's bogus on all levels.

[SoonerPride]

29. It is a scam. Delete it and don't worry about it.

[marble falls]

32. Not worried. Miffed and looking for a punching bag. The people who take our information don't ...

... take very good care of it. If our information is valuable we need at least paid for it, and they need to be held responsible for safeguarding it. I keep my virus and anti-ad software current and I use Firefox and DuckDuckGo, and I change my complex passwords in random but short intervals. I turn my firewall off for no one.

Used crabcake for only one account: Pinterest. And I've been off that since April, right after this started the first time.

Not worried: slightly miffed.

[WhiskeyGrinder]

31. This is a classic.