Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Phishing email

I just received the email below in my junk mail folder.

One especially weird thing is that it was sent from my email address and the sender info indeed had the exact info of my actual contact card - except there was a link on his (hers?) that I never put there: (50543644:

Here’s a cut and paste of the email I got.. Anyone have any insights/advice/thoughts/other?

Thanks.

JGR

I am sorry to inform you that your device was compromised.


I'll explain what led to all of this. I have used a Zero Day vulnerability with a special code to infect your device through a website.

This is a complicated software that requires precise skills that I have. It works as a chain with specially crafted and unique code and that’s why this type of an attack can go undetected.

You only need one not patched vulnerability to be infected, and unfortunately for you – it works that simple.


You were not targeted specifically, but just became one of the quite a few unlucky people who got hacked that day.

All of this happened a few month ago. So I’ve had time to collect information on you.


I think you already know what is going to happen next.

During that time, my software was quietly collecting information about your habits, websites that you visit, searches you do, texts you send.

There is more to it, but I have listed a few reasons for you to understand how serious this is.


For you to clearly understand, my software controlled your camera and microphone as well and it was impossible for you to know about it.

It was just about right timing for me to get you privacy violated.


I’ve been waiting enough and have decided that it’s time to put an end to this.

So here is my offer. I need a consulting fee to delete the media content I have been collecting.

Your privacy stays untouched, if I get paid.

Otherwise, I will leak the most damaging content to your contacts and post it to a public tube for perverts to explore.


I understand how damaging this will be for you, and amount is not that big for you to keep your privacy.

Please dont blame me – we all have different ways of making a living.


I have no intention of destroying your reputation or life, but only if I get paid.

I don’t care about you personally, that's why you can be sure that all files I have and software on your device will be deleted immediately after I receive the transfer.

I only care about getting paid.


My modest consulting fee is 1650 US Dollars transferred in Bitcoin. Exchange rate at the time of the transfer.

You need to send that amount to this wallet: ******


The fee is non negotiable, to be transferred within 2 business days.

We use Bitcoin to protect my identity.


Obviously do not try to ask for any help from anybody unless you want your privacy to be violated.

I will monitor your every move until I get paid. If you keep your end of the agreement, you wont hear from me ever again.


Take care.


[Edited by Moderator]

Posted on Jul 18, 2021 8:39 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 19, 2021 9:44 AM

Recognize and avoid phishing messages, phony support calls, and other scams - https://support.apple.com/HT204759


Probably what the scammer is sending you is bogus. It is easy to find things on the internet. I had one even send me one saying he/she know my password. And they did -- one I had used on several accounts 10 years ago. I know ssome of those old sites had weak security and somebody had probably hacked those and stolen a bunch of email addresses and the BBS log in information, then the scammer bought it on the dark web. No risk to me since I had changed them all ages ago and some of those sites had disappeared completely, but still it had an element of veracity to it. Their main goal is to panic you into providing something real, either information or money.

Similar questions

1 reply
Question marked as Top-ranking reply

Jul 19, 2021 9:44 AM in response to UserJR

Recognize and avoid phishing messages, phony support calls, and other scams - https://support.apple.com/HT204759


Probably what the scammer is sending you is bogus. It is easy to find things on the internet. I had one even send me one saying he/she know my password. And they did -- one I had used on several accounts 10 years ago. I know ssome of those old sites had weak security and somebody had probably hacked those and stolen a bunch of email addresses and the BBS log in information, then the scammer bought it on the dark web. No risk to me since I had changed them all ages ago and some of those sites had disappeared completely, but still it had an element of veracity to it. Their main goal is to panic you into providing something real, either information or money.

Phishing email

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.