You've been hacked "Hello pervert" Email

OMG i go that same message yesterday, and i stupidly opened it i realized it was scam.

littlekittie224 wrote:

OMG i go that same message yesterday, and i stupidly opened it i realized it was scam.

Opening it won't hurt anything.

Hello~ What I can tell you is to read the other 8 pages of this thread…perhaps that will put your mind at ease.

~Katana-San~

That question has been answered over and over in the 8 pages of the thread you posted to, so please read some of it.

Did the OP share the raw email with you? I received the same email, and neither it nor the OP’s post show a misspelling of iCloud in the email body.

Doesn’t more definitive evidence reside in the raw header information with such flags as DMARC info and/or quarantine status, as seen here in the identical email in my Junk folder?

No hostility intended — I’m trying to determine how you arrived at your assessment with (ostensibly) only the OP’s pasted email body text. If it was deductive, by citing traits commonly found in other, unrelated junk email, then us recipients aren’t any better armed to make our own assessments going forward. ✌🏼

Yes, I read that — but since there’s no evidence of a misspelled “iCloud” in the OP’s post, and you weren’t privy to the raw source, I don’t understand where this misspelling is evident.

Possibly, if the OP wasn’t aware of how to discern a capital “i” from a lower case “L” in “iCloud”, and you summarily claimed that was the case, isn’t there a possibility that, due to your level and points, the OP assumed you nailed it? A sort of ‘argument from authority’ scenario? The email I received doesn’t show such a misspelling, but maybe the scammer read this thread and decided to patch the hole?

My aim here is to learn how to assess an email as fraudulent, and your claim based on someone else’s claim doesn’t help me get there. Would you mind being a bit more helpful? What about DMARC and quarantine?

I received this same email, but the address is exactly my icloud, @me and @Mac accounts. how do I know or check they don't have access to my computer or devices? everything I've read about this email seems like it's a scam, but it def appears as though it came form my account

idk, it def got kicked to my spam, but it looks very convincing, I'm more concerned that they have my iCloud password, because the email it was sent from is my own it looks like, there's no uppercase I in iCloud for the l, so I'm just confused as to how they're spoofing it.

Just want to add this post to note that while it could be the case, in this instance, it's not the case. A force-capitalisation of the "iCloud" copy-pasted from the original post shows that it is, in fact, an L. Just for those who are seeing this and thinking "Omg mine's an actual L, my email asking for money must be real!" Regardless though, the email address appearing to be real does not make it real. People can make an email seem like it is coming from an address that it is not.

I also received the email, what should I do?
I opened the message today and it was sent to me on May 26th

HELP

Hello pervert, I've sent this message from your iCloud mаil.

I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisеly.

Have you heard of Pegasus? This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. I guess, you already figured out where I’m getting at.

It’s been a few months since I installed it on all your dеviсеs because you were not quite choosy about what links to click on the intеrnеt. During this period, I’ve learned about all aspects of your private life, but оnе is of special significance to me.

I’ve recorded many videos of you jerking off to highly controversial роrn videos. Given that the “questionable” genre is almost always the same, I can conclude that you have sick реrvеrsiоn.

I doubt you’d want your friends, family and co-workers to know about it. However, I can do it in a few clicks.

Every number in your contact Iist will suddenly receive these vidеоs – on WhatsApp, on Telegram, on Instagram, on Facebook, on email – everywhere. It is going to be a tsunami that will sweep away everything in its path, and first of all, your fоrmеr life.

Don’t think of yourself as an innocent victim. No one knows where your реrvеrsiоn might lead in the future, so consider this a kind of deserved рunishmеnt to stop you.

I’m some kind of God who sees everything. However, don’t panic. As we know, God is merciful and forgiving,  and so do I. But my mеrсy is not free.

Transfer 1350 USD to my Litecoin (LTC) wallet: ltc*******0n**************ysg2l

Once I receive confirmation of the transaction, I will реrmanently delete all videos compromising you, uninstаll Pegasus from all of your devices, and disappear from your life. You can be sure – my benefit is only money. Otherwise, I wouldn’t be writing to you, but destroy your life without a word in a second.

I’ll be notified when you open my email, and from that moment you have exactly 48 hours to send the money. If cryptocurrencies are unchartered waters for you, don’t worry, it’s very simple. Just google “crypto exchange” or "buy Litecoin" and then it will be no harder than buying some useless stuff on Amazon.

I strongly warn you against the following:

* Do not reply to this email. I've sent it from your iCloud mail.

* Do not contact the police. I have access to all your dеviсеs, and as soon as I find out you ran to the cops, videos will be published.

* Don’t try to reset or destroy your dеviсеs. As I mentioned above: I’m monitoring all your activity, so you either agree to my terms or the vidеоs are рublished.

Also, don’t forget that cryptocurrencies are anonymous, so it’s impossible to identify me using the provided аddrеss.

Good luck, my perverted friend. I hope this is the last time we hear from each other.

And some friendly advice: from now on, don’t be so careless about your online security.

[Edited by Moderator]

Hello pervert, I've sent this message from your iCloud mаil.

I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisеly.

Have you heard of Pegasus? This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. I guess, you already figured out where I’m getting at.

It’s been a few months since I installed it on all your dеviсеs because you were not quite choosy about what links to click on the intеrnеt. During this period, I’ve learned about all aspects of your private life, but оnе is of special significance to me.

******

I doubt you’d want your friends, family and co-workers to know about it. However, I can do it in a few clicks.

Every number in your contact Iist will suddenly receive these vidеоs – on WhatsApp, on Telegram, on Instagram, on Facebook, on email – everywhere. It is going to be a tsunami that will sweep away everything in its path, and first of all, your fоrmеr life.

Don’t think of yourself as an innocent victim. No one knows where your реrvеrsiоn might lead in the future, so consider this a kind of deserved рunishmеnt to stop you.

I’m some kind of God who sees everything. However, don’t panic. As we know, God is merciful and forgiving,  and so do I. But my mеrсy is not free.

Transfer 1250$ to my Litecoin (LTC) wallet: ltc1qvxgqx0pxg4mskme6auz83zalfvam3wx4qeqky5

Once I receive confirmation of the transaction, I will реrmanently delete all videos compromising you, uninstаll Pegasus from all of your devices, and disappear from your life. You can be sure – my benefit is only money. Otherwise, I wouldn’t be writing to you, but destroy your life without a word in a second.

I’ll be notified when you open my email, and from that moment you have exactly 48 hours to send the money. If cryptocurrencies are unchartered waters for you, don’t worry, it’s very simple. Just google “crypto exchange” or "buy Litecoin" and then it will be no harder than buying some useless stuff on Amazon.

I strongly warn you against the following:

* Do not reply to this email. I've sent it from your iCloud mаil.

* Do not contact the police. I have access to all your dеviсеs, and as soon as I find out you ran to the cops, videos will be published.

* Don’t try to reset or destroy your dеviсеs. As I mentioned above: I’m monitoring all your activity, so you either agree to my terms or the vidеоs are рublished.

Also, don’t forget that cryptocurrencies are anonymous, so it’s impossible to identify me using the provided аddrеss.

Good luck, my perverted friend. I hope this is the last time we hear from each other.

And some friendly advice: from now on, don’t be so careless about your online security.?

[Edited by Moderator]

LawIsInTheAir wrote:

Does anyone of you use "Safe Lock" (iPhone App) or "Clean Mails" (iPhone and Mac App)? I installed them very recently and got this mail now. Im curious if you experienced the same.

I would not install add-on security apps.

Too many of add-on security apps solve problems we don’t have, or are sketchy or problematic, and one of the better-known add-on security apps resold users’ personally-identified metadata, and I’d be surprised if others weren’t also leaking users’ data or metadata.

As for the spam scam, that is spam, and spam is spammed because spamming scams works.

Thank you. I thought I could trust the AppStore's Information of how the app is handling the users data.

I'm just so curious where they got my mail address from. Generally I always use the generated aliasses by apple which help to identify the leaking website/app.

Beware: don't confuse an account and an email.

This attack is fired from an hacked account you cannot see in the email headers because this is private information protected by a password.

But the 'From:' field is free, it is not an account, but an email which is public information and not protected by a password.

This fundamental difference should be teached at school before our first use of email ( around 10 ). This fundamental difference should be reminded by every large IT company who care of users security ( Αmαzοn, ΑppIe, Fαcebooκ, GοοgΙe, Μιcrοsοft… ).

The only thing that might be useful to track the origin is the raw source of the message. The text is completely useless. And the origin is most likely a botnet of thousands of hacked computers, with the actual sender very well hidden.

Sorry to be the bringer of bad news.