Alert: Cyber criminals send victims their own passwords in new sextortion scam

Growing Ransomware And Extortion Emails Seeking Payments In Crypto

Cybercriminals send users' private credentials to make them believe their messaging accounts have been hacked. Some got the password in the email subject line, and the mail said, "We have filmed you watching adult films on your computer", and they demanded money to avoid disclosing the details to the contacts.

How Does It Happen?

The target gets emails stating they had been filmed by the criminals watching adult clips. They claim they installed ransomware in their machines, which allowed the internet browsers to work on remote desktops with the login details sent in the mail by the scammers. 

The details allowed the remote desktop user to access your display screen and the camera. It also allowed them to access all the program's information and contact details through messenger, emails and social media.

They say they recorded a video through their webcam where the target was watching such sites. They ask to make cryptocurrency payments to avoid distributing the recordings to close relatives, workers and others in the contact lists.

They caution, "I will forward the needed evidence, but it will also be forwarded to some of your friends on the list." Then, they say they need you to act in 24 hours (deadline) to ensure you live out of guilt for the rest of your life. 

Finally, they claim, "You do not know me. Besides, I know everything related to your online activities or present a Facebook contact list or other digital activities in the last six months." Therefore, the blackmailers may ask you to take action and send money immediately.

Ransomware Alert

The year 2021 was the year of ransomware attacks. The criminals induced a virus in the software and extorted money by hacking the systems of individuals who got messages asking for payment in crypto. They installed the app by disguising it as a legitimate executable. 

Once downloaded and installed, they send random demands requesting the target to send money through transaction methods that are difficult to trace.

They gain the passwords through an old data breach method. You can run the email address to check if their address has been compromised in the data breach. 

The accounts at risk are often shown in the list on the website "Have I been pwned." In recent months, they have been sending emails and demanding payment using WannaCry.

How To Protect Yourself?

• One should not be rushed into deciding or paying a lot of money to anyone when any such criminal group targets. 

• These are the scams where people are coerced to pay normally in bitcoins, and the message sent by the criminals may appear convincing. Also, it may include the recipient's genuine password. 

• However, they aim to scare and humiliate the other person to get a payment in return. So, never click on the links in the email, and do not be tempted to use Bitcoin to pay.

• If your account is vulnerable – it can be targeted again. You should secure your account and reset all information. Always use a strong separate password or set up two-factor authentication. 

• Do not reply to frauds, and update the anti-virus software of your machine regularly.

• Cover your webcam when you are not using it, and if you have received an email or paid money, report it to the regulatory agencies.