I received the below email. Is this seriously going to happen or just a phishing email and how does he knows my password and my primary email

This is your badluck. I know that ****** is your password. More to the point, I am aware about your secret and I have proof of it. You don't know me personally and nobody employed me to check out you.


[Edited by Host]

Posted on Jul 30, 2018 1:11 PM

Reply
Question marked as Top-ranking reply

Posted on Jul 30, 2018 1:16 PM

There are databases out there of hacked account information. You can check to see if any of yours is by using this website:


https://haveibeenpwned.com/


That can give the creep who came with this email enough information on you to scare you. If you are still using that password for anything, it would be advisable to change it. Not because this person has it but because it's out there and associated with your email.

23 replies

Jul 31, 2018 7:19 AM in response to pkryder

I felt the point needed elaboration as based on your initial dismissal outright of "unique pixel" many people reading your post might infer that tracking is not possible.

Ah, gotcha'. You are correct. Without elaboration on my part, it could be read more than one way. Something that didn't occur to me, or I didn't feel was necessary to explain since I was talking about the pixel itself, not its use.

Jul 30, 2018 2:41 PM in response to Abuhmaidan12345

More on the subject of these dumb emails:


https://www.techlicious.com/blog/is-the-****-blackmail-scam-real/comments-/CP4/


Note in particular (as the main report of this link mentions), you are never addressed personally. Which means, they don't even know who got the email. And they wouldn't anyway since they send out thousands of them to see who will fall for it. And the complete lack of evidence they claim to have. Any person who could actually blackmail you would make sure to prove they have the evidence they say they have. Otherwise, they're just empty words.


Edit: The forums are being way too helpful blocking certain words. Which trashes the link. So, here's the article (with these forums again automatically blocking ever instance of the word p*rn:


What would you do if you received an email from someone claiming to have hacked your computer and recorded you via your webcam while you were engaged in watching ****, then threatening to send the video to everyone in your email and social media contact lists if you don’t pay a $260 ransom? Would you pay the ransom? Even if you’ve never viewed ****, what if they made the same threat to reveal the private details of all your emails?

This is exactly the situation some of our readers found themselves in recently, and they contacted us for help on how to proceed.

Here is an example of one the emails [grammatical errors left intact]:

Good Morning my friend. I represent the group of web criminals in Iran. I use this mail address because we think that you will check it. Few times ago my team put the virus on web-site with **** and as far as you clicked on a play button your system started shooting your screen and activating camera to capture you self-abusing. Eventually I mean you understand what compromising evidence Ive earned. Moreover, this software made your device act as dedicated server with plenty of functions like keylogger, parser etc. To sum up, my software picked all data, especially all your contacts from messengers, e-mails, social networks. If you wanna make me silent you must make a transaction of 260 dollars with bitcoin. 1K2auXQEKz7Ro8cRa2xr3bAPV2n6KT5vi1 You must use it as usual credit card number. If you send bitcoins nobody will see your shame. Watch youtube manuals about methods of buing BTC... I can offer you this exchanger: localbitoins.com. If you have a problem with this, you can search comfortable ATM for bitcoin at coin atm radar. I give you no more than twenty four hours since you read our message to pay. You can complain cops, but they can not find us I use bot network, and of course we live abroad. If you want us to show proofs we will share it to seven mates from your data after that you will be given their contacts. So you will ask them if something strange was received about you. For some questions just reply. Dont be fullish, AmAZinGcRackeR$.

Scary, right? And there have been instances where victims’ computers were hacked, they were filmed in various states of undress (or worse) and then blackmailed that may make this threat seem all too real. But there are several indications that this is nothing more than a phishing scam, hoping to rope in active **** watchers with false threats (an easy demographic to target via mass email given that the world’s largest **** site, Pornhub.com, gets 75 million visitors PER DAY).

First, there is nothing in the email that demonstrates they know anything personally about you: it’s not addressed to you by name and there’s no detail about what site you supposedly visited and when. Nor did they supply a screenshot of the “self-abusing” they allege to have captured. In fact, they are explicitly discouraging you from asking for proof, by threatening to share said “proofs” with your “mates” if you ask. That is completely contrary to how we would expect a real hacker/blackmailer to act – if I wanted to scare the bejesus out of you to get you to pay, the first thing I would do is show you a compromising screen capture to prove that this is very, very real.

Another red flag is that when our readers ran scans using antimalware tools, no malware was detected. Antimalware tools aren’t perfect, but the better ones should have picked up the type of remote administration tool (RAT) described in the email.

Searching the web, there are reports of people receiving similar email scams, going back at least to last fall. The wording of the email varies, including where the scammers claim they’re from, the nature of their threat and the amount of money being demanded. Some people are falling for them, but fortunately not many. I researched a selection of the bitcoin accounts used in these scams and none of the emails had duped more than a handful of victims.

Unfortunately, these scams will likely continue and morph into new threats as the ubiquity of bitcoin makes it easier for scammers to hide behind these accounts and for victims to pay.

So, if you get one of these emails, should you pay the ransom before all your friends find out what you’ve been up to?

The answer is no, don’t be “fullish”.

[EDITOR'S NOTE 7/12/18: A number of people have posted in the comments that they received a version of the email which includes a real password they've used in the past. Does this mean that they should be concerned? The answer is No and Yes. No, you shouldn't be concerned that your computer was hacked and you were actually filmed watching **** - it's still a scam. But, yes, you should be concerned that your password has been leaked through a data breach. Security researcher Troy Hunt has uncovered more then 500 million passwords leaked through these breaches. That password in the email was likely one of them.

If it is still an active password for you, the scam email should be a big wake up call that you need to ensure you are using unique and secure passwords for every one of your accounts. We strongly recommend a password manager like Dashlane or 1Password , which will automatically check your passwords to see if they have been revealed in a breach and help you create unique, secure ones for every site.]

[EDITOR'S NOTE 7/20/18: One reader reported receiving an attachment titled "Invoice" with the **** scam email. If you get an attachment, DO NOT OPEN IT. Email attachments are one of the primary ways hackers use to install malware on your computer, which could turn this fake malware scam into a very real one.]

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

I received the below email. Is this seriously going to happen or just a phishing email and how does he knows my password and my primary email

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.