Afteroffice

Wiki

User Tools

Site Tools

Trace: • glossary
faq:email:dealing_with_blackmail

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
faq:email:dealing_with_blackmail [2019/12/24 12:51]
ziyu 		faq:email:dealing_with_blackmail [2020/01/03 13:52] (current)
ziyu
Line 1: Line 1:
-====== Blackmail emails - what should I do? ======+====== I received blackmail emails - what should I do? ======
  
-=== Firstly, what is it? === +===== Firstly, what is it? ====== 
-This is generally known either as a "webcam blackmail", "sextortion scam" or a "scam email". You may or may not have come across it but these types of mails are normally diverted into your junk folder. Within the junk folder, these mails are the ones that stand out compared to the rest. The typical spam mails that tries to lure users into clicking their link with too-good-to-be-true offers or lewd titles would end up being ignored by an average person. The blackmail scams on the other hand, are structured to be intrusive in nature. Most blackmails share the following similar feature on their subject line :+This is generally known either as a "webcam blackmail", "sextortion scam" or a "scam email". They are structured to be more intrusive in nature and most would share the following similar feature on their subject line :
   *A partial or fully correct password that the target victim has used some time ago.   *A partial or fully correct password that the target victim has used some time ago.
-  *Gained access into the victims device and used it to film the victim via webcam. +  *Claimed to have gained access into the victims device and used it to film the victim via webcam. 
-  *Gathered data on the victims adult site habits and is ready to send them to their family members/friends. +  *Claimed to have gathered data on the victims adult site habits and is ready to send them to their family members/friends. 
  
 These features can sometimes get personal with the user and they will, in favor of the attacker, become intimidated and even give in to their demands. Demands such as payments in Bitcoin(BTC) through a BTC address will be included in the end of the mail and it will not be possible to track it back to the sender. For reference, please have a look on the following image to have an idea of how the scam looks like :\\  These features can sometimes get personal with the user and they will, in favor of the attacker, become intimidated and even give in to their demands. Demands such as payments in Bitcoin(BTC) through a BTC address will be included in the end of the mail and it will not be possible to track it back to the sender. For reference, please have a look on the following image to have an idea of how the scam looks like :\\ 
Line 12: Line 12:
 As the cost of sending millions of blackmail emails like the one above are basically zero, a few payments made by unfortunate victims are easy profits and will encourage the attackers to continue on. This in turn, will lead to the rise of blackmail scams appearing in our emails.  As the cost of sending millions of blackmail emails like the one above are basically zero, a few payments made by unfortunate victims are easy profits and will encourage the attackers to continue on. This in turn, will lead to the rise of blackmail scams appearing in our emails. 
  
-=== Then, what should I do when I receive blackmails like these? ===+===== Then, what should I do when I receive blackmails like these? =====
  
-1. The first step is to always stay calm and not be frightened by just an email.The ‘old’ password that appears on the subject line could be leaked from another web service/server that has been compromised. That is, if the user has frequently signed up on other services using the very same password.\\+1. The first step is to always stay calm and not be frightened by just an email.\\
  
 2. If you've opened it, do not read the contents as they're pointless anyways.\\ 2. If you've opened it, do not read the contents as they're pointless anyways.\\
  
-  * If you did read it out of curiosity, you may notice a Bitcoin address in the lower section or any fishy path leading to payment gateway.**Never** click on any links in inside the email and **do not** pay a single cent of ransom money to them.\\ + -> If you did read it out of curiosity, you may notice a Bitcoin address in the lower section or any fishy path leading to payment gateway. **Never** click on any links in inside the email and **do not** pay a single cent of ransom money to them.\\ 
-  *  + 
-3. Proceed on with blocking the email address by referring to : [[https://afteroffice.com/support/doku.php?id=faq:email:blacklist_an_email_address_on_webmail|Steps to blacklist an email address on webmail]] to block the sender from sending any emails to you in the future.\\ +3. Proceed on with blocking the email address by referring to : [[https://afteroffice.com/support/doku.php?id=faq:email:blacklist_an_email_address_on_webmail|steps to blacklist an email address on webmail]] to block the sender from sending any emails to you in the future.\\ 
  
 4. Following on by deleting the same email referring to the image below :\\ 4. Following on by deleting the same email referring to the image below :\\
Line 30: Line 30:
 6. Finally, perform an anti-virus scan on your PC to make sure nothing malicious gets past you.\\ 6. Finally, perform an anti-virus scan on your PC to make sure nothing malicious gets past you.\\
  
-Side note : Always make it a habit to run anti-virus programs **at least** once a week to make sure that your PC is safe from any threats.+**Side note** : Always make it a habit to run anti-virus programs **at least** once a week to make sure that your PC is safe from any threats. 
 + 
 +==== Additional Information : Why are they using my password and where did they get them from? ==== 
 + 
 +To make the threat mails more credible and effective, scammers have moved on to include the "latest" or mostly "old" passwords that the victims may have used at one point. The whole point of using it is to make sure their message gets personal with their victim, and more importantly, intimidate those who lacks awareness on this issue. A typical tech fluent individual today, would easily ignore mails like these but the rest of the population, with lesser exposure to issues like this may get shocked and would probably give in to the demands of the scammer. 
 + 
 +These passwords can be easily obtained from sites that were hacked. For this case, the password that appears on the subject line could be leaked from another web service/server that has been compromised.That same password could've likely been matched up to a database of emails & stolen passwords and got sent out to scam millions of users across the globe. That is, if the user has frequently signed up on other services using the very same password. To check if your email or password was compromised in a data breach please visit the following links : \\ 
 + 
 +  *[[https://haveibeenpwned.com/|Email Address]]\\ 
 +  *[[https://haveibeenpwned.com/Passwords|Password]]\\ 
 + 
 +**Side note** : Kindly refer to our guide to better secure your VO account from any threats at [[https://afteroffice.com/support/doku.php?id=faq:profile:how_to_protect_your_vo_accounts_from_being_compromised|How To Protect VO Accounts]]\\
faq/email/dealing_with_blackmail.1577163095.txt.gz · Last modified: 2019/12/24 12:51 by ziyu

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki