Topic: Ransom Email - SaveYou

[BarryCrocker]

Hoping anybody can help with this one. I got the email below last Sunday. The only sites I'd been on recently that were out of the norm was one of the links someone provided in the Dortmund friendly thread.

I received a follow-up email today from a similar email address and different bitcoin wallet.

My only concern is that the password they provided is my actual password for RAWK and it's the same email address. I'm running MacOS Safari and I have my camera disconnected.

Is there any chance they harvested my info of RAWK?

Hi, I know one of your passwords is: XXXXXX

Your computer was infected with my private malware, your browser wasn't updated / patched, in such case it's enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more - Google: "Drive-by exploit".

My malware gave me full access to all your accounts (see password above), full control over your computer and it also was possible to spy on you over your webcam.

I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF!

After that I removed my malware to not leave any traces and this email was sent from some hacked server.

I can publish the video of you and all your private data on the whole web, social networks, over email of all contacts.

But you can stop me and only I can help you out in this situation.

The only way to stop me, is to pay exactly 800$ in bitcoin (BTC).

It's a very good offer, compared to all that horrible shit that will happen if I publish everything!

You can easily buy bitcoin here: www.paxful.com , www.coinbase.com , or check for bitcoin ATM near you, or Google for other exchanger.
You can send the bitcoin directly to my wallet, or create your own wallet first here: www.login.blockchain.com/en/#/signup/ , then receive and send to mine.

My bitcoin wallet is: 1MnUgqSkToq3j7ozwjSh54m1WxWZ3Xqym6

Copy and paste my wallet, it's (cAsE-sEnSEtiVE)

You got 3 days time to pay.

As I got access to this email account, I will know if this email has already been read.
If you get this email multiple times, it's to make sure that you read it, my mailer script is configured like this and after payment you can ignore it.
After receiving the payment, I remove all your data and you can life your live in peace like before.

Next time update your browser before browsing the web!





Mail-Client-ID: 4569776946

[scouser4eva]

Scam mate ignore it

[McrRed]

[emoji23][emoji23][emoji23]
Pleasuring yourself on webcam? You should be charging him for that! Apparently you can make loads of money if you get the particulars right.

Seriously? I'm calling bullshit on this one. I take it you've changed all your passwords (you'll have to change them again anyway).
Google "Reddit malware removal" for the steps to take to remove any malware, Trojans, keyloggers etc
If they've sent you footage of yourself then that's a different thing but in the meantime they got un/lucky with capturing your rawk password and nothing else and they're trying hard to make you think they can do anything they want from their powerful position. Bollocks.
If you're really worried, cleanse your computer and change all related passwords then close down all your social media so that anything posted doesn't hit your circle. Nobody else gives a fuck. Maybe you don't.

I didn't ask. Are you concerned? You didn't say...

Regardless, good luck, mate!

[rob1966]

I was getting the same email for the last 3 or 4 months at work. They had a password that I created for some site in 2005. I have no idea what site it was as I've never used the password on any others and have no idea what site I registered with.

Its a total scam, you'll probably get bombarded with different variations of the same email over the next few months.

[S]

That would honestly scare the shit out of me, seeing as they correctly named a password. I don't know anything about these things though, so the rest are probably right in saying it's nothing.

[...]

Ignore and CHANGE YOUR PASSWORD

[sms1986]

I got one of those a few months back, they had part of an old password (an old laptop of mine got infected with spyware) and were claiming the webcam thing too. I use a Chromebook with a larger monitor attached so the Chromebook itself is kept closed so the webcam on both my old and new Chromebook couldn't have seen anything.

I just ignored it and nothing happened.

[tinner777]

Throw your email here and it will tell you where they got your password
https://haveibeenpwned.com

[rob1966]

Throw your email here and it will tell you where they got your password
https://haveibeenpwned.com

Thanks for that

Myfitnesspal, they got my work and a personal one I use when websites need an email from them. I now know which site the password I never used again was grabbed from. Also a spybot that has got loads of works colleagues including me.

[rob1966]

Hoping anybody can help with this one. I got the email below last Sunday. The only sites I'd been on recently that were out of the norm was one of the links someone provided in the Dortmund friendly thread.

I received a follow-up email today from a similar email address and different bitcoin wallet.

My only concern is that the password they provided is my actual password for RAWK and it's the same email address. I'm running MacOS Safari and I have my camera disconnected.

Is there any chance they harvested my info of RAWK?

Fucks sake, I've just found the same email in my junk folder and its got my RAWK password.

[Barneylfc∗]

I see you're yet to deny having a wank while watching porn

[rob1966]

I see you're yet to deny having a wank while watching porn

At some point in our lives we've all done it.

[Red Beret]

My mate got a similar email like this last year and she was equally worried.  But then there was an Echo article.  Just update passwords and check your security.

[rob1966]

My mate got a similar email like this last year and she was equally worried.  But then there was an Echo article.  Just update passwords and check your security.

Its a pain in the arse though that someone has been hacked and our passwords are out there. The email/password combination I've been sent today in the email is the one I use on here and for any other non sensitive websites where no personal or financial details are kept.

[Barneylfc∗]

At some point in our lives we've all done it.

Fair point 

[BarryCrocker]

Throw your email here and it will tell you where they got your password
https://haveibeenpwned.com

Legend. Thanks

[Claire.]

First thing that came to mind was haveibeenpwned!

This is why you need to use two factor auth for anywhere that has it and keep passwords unique (preferably using generated passwords).

[Mark Walters]

I got the same email.  I don't think me wanking in front of my computer is anything anyone can bribe me with!

[rob1966]

First thing that came to mind was haveibeenpwned!

This is why you need to use two factor auth for anywhere that has it and keep passwords unique (preferably using generated passwords).

The problem with the generated passwords is I can never remember them and then I can never log in using different laptops or my phone.

[Claire.]

The problem with the generated passwords is I can never remember them and then I can never log in using different laptops or my phone.

Use an encrypted password manager.

[Ziltoid]

I have had loads of these at work.  I'm still waiting for a film of me masturbating furiously through my non existent webcam.

[Crosby Nick]

I have had loads of these at work.  I'm still waiting for a film of me masturbating furiously through my non existent webcam.

I got this email a while back and had a mild panic too. Then I remembered I dropped my phone a while back and the selfie camera is absolutely fucked so I think I’m in the clear.

[rob1966]

I got this email a while back and had a mild panic too. Then I remembered I dropped my phone a while back and the selfie camera is absolutely fucked so I think I’m in the clear.

You'd just be pissed off that they ignored your demands for royalties.

[JC the Messiah]

Use an encrypted password manager.

This.

I literally don't know my RAWK password. I know it's unique, about 30 characters long, contains characters as well as numbers and letters. I don't have to remember it. Dashlane does that for me. It syncs between my phone, laptop and any other devices as I need. If my RAWK password became public, then it wouldn't affect any other accounts I have elsewhere, as the password was generated by Dashlane uniquely for RAWK.

As Claire also said, use 2FA wherever you can. Makes your security that much more robust (by a significant factor).

[filopastry]

I would imagine most of us have been stung in some of the various data breaches leading to compromised passwords, so no great surprise that anyone could find one of your passwords relatively easily.

I wouldn't be worried unless they send you the  video 

[classycarra]

First thing that came to mind was haveibeenpwned!

This is why you need to use two factor auth for anywhere that has it and keep passwords unique (preferably using generated passwords).

This might sound daft, but is that website definitely all good to use? I know the worst case is probably only that another website has your email but just wondering

[JC the Messiah]

This might sound daft, but is that website definitely all good to use? I know the worst case is probably only that another website has your email but just wondering

No, there's no risk. Any email address that's been used for email is out in the wild and is meant to be "public".

[classycarra]

No, there's no risk. Any email address that's been used for email is out in the wild and is meant to be "public".

Guess I just meant in terms of key loggers/spyware through the site, but I guess we'd know by now.

Good tip, cheers for this everyone. Not had emails like that before but don't want them!

[ChaChaMooMoo]

But on a question of security.

How safe are the Firefox's and Chrome's inbuilt password manager as compared to the other Password Manager Softwares?

[Claire.]

Not sure about firefox as I don't use it, but the one in chrome is part of your google log in so can be protected by 2FA (you can enable it in your account).

I would strongly suggest enabling 2FA for your google log in, protects you across all products and it's just entering a code from a text.

[FiSh77]

I have had loads of these at work.  I'm still waiting for a film of me masturbating furiously through my non existent webcam.

Wanks?

Dave Whelan has the footage on his phone, watches it to cheer himself up if anybody mentions his broken leg

[Elmo!]

Use LastPass, to generate and store passwords. You can install it on your phone so you can log into all your apps on your phone.

Of course you have to trust LasPass and they are not infallible but on balance I decided it was worth it.

This might sound daft, but is that website definitely all good to use? I know the worst case is probably only that another website has your email but just wondering

It is trustworthy. The Darknet Diaries podcast has done interviews with the guy that set it up.

[Elmo!]

Not sure about firefox as I don't use it, but the one in chrome is part of your google log in so can be protected by 2FA (you can enable it in your account).

I would strongly suggest enabling 2FA for your google log in, protects you across all products and it's just entering a code from a text.

Don't use texts for 2FA if possible, it is not secure.

Install an Authenticator app on your phone instead. Both Google and Microsoft make one and you can use either on any site that supports authenticator apps.

Also, 2FA is a big improvement but it is not infallible. There are phishing sites now that get you to enter your 2FA code which they just immediately use to log in to the site themselves. Always check the URL of the site you are logging in on!

[Alan_X]

I've had those emails. I knew they were fake because I put tape over the camera when I'm pleasuring myself.

I'm pretty certain the password they've been sending me was stolen when the BA site was hacked. It stood out because I changed all my passwords after the hack and that one was an old one.

[Claire.]

Don't use texts for 2FA if possible, it is not secure.

Install an Authenticator app on your phone instead. Both Google and Microsoft make one and you can use either on any site that supports authenticator apps.

Also, 2FA is a big improvement but it is not infallible. There are phishing sites now that get you to enter your 2FA code which they just immediately use to log in to the site themselves. Always check the URL of the site you are logging in on!

I use authenticator for quite a few things, but SMS is better than no 2FA!

[Brian Blessed]

Somewhere effes is reading this thread and sighing with relief.

BTW, if anyone wants to see me wanking off via webcam, PM me.

[JC the Messiah]

Don't use texts for 2FA if possible, it is not secure.

Install an Authenticator app on your phone instead. Both Google and Microsoft make one and you can use either on any site that supports authenticator apps.

Also, 2FA is a big improvement but it is not infallible. There are phishing sites now that get you to enter your 2FA code which they just immediately use to log in to the site themselves. Always check the URL of the site you are logging in on!

Authy is my preferred choice, as you can install it on multiple devices, including desktop, so you always have access to it, and it provides a backup should you lose your phone.

[ChaChaMooMoo]

Somewhere effes is reading this thread and sighing with relief.

What if its Effes's way of getting back at those who made fun of him in that thread?!?

[El Lobo]

What if its Effes's way of getting back at those who made fun of him in that thread?!?

There’d be too many

A thousand monkeys at a thousand computers wouldn’t have the time....with Effes around

[ChaChaMooMoo]

There’d be too many

I still laugh hysterically and have tears in my eyes reading the first 3-4 pages of that thread.

Wow 7 years since then.