Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




4235 posts

Uber Geek
+1 received by user: 939


Topic # 245113 19-Jan-2019 08:51
Send private message quote this post

Morning,

 

My wife received an e-mail this morning from her (Orcon) address to her Orcon address. The subject was "Alert e-mail address hacked". It then proceeded to demand money, explaining they had hacked into her account and had her information. The message included her password,which is what concerned about. The jerk who sent her the message is demanding 675 Bitcoin dollars or he will send every picture she has ever taken (he says he logged into her phone to do this) to every contact on her list.

 

Thing is, her phone has security on - but could this happen? I've told her to change has passwords already. Has anyone else had this?


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
371 posts

Ultimate Geek
+1 received by user: 67


  Reply # 2163556 19-Jan-2019 08:54
2 people support this post
Send private message quote this post

They're scamming. Yes they might have the password or a variant of it but it's from lists that have been purchased or distributed on the "dark net".

 

Put her email into www.haveibeenpwned.com

 

and scroll to the bottom to see where the data breaches came from

 

 


defiant
781 posts

Ultimate Geek
+1 received by user: 398

Lifetime subscriber

  Reply # 2163558 19-Jan-2019 08:57
One person supports this post
Send private message quote this post

It hasn't been hacked

 

Her account is probably one of many that have been compromised on a website with weak security. Then all said spammer does is send an email with the users password, they've obtained from password lists, hoping they fall for it and send them money.

 

 

 

Just change passwords, and ignore the email. Start using a password manager as well.

 

You can see where her email has been compromised here https://haveibeenpwned.com/

 

 


 
 
 
 




4235 posts

Uber Geek
+1 received by user: 939


  Reply # 2163559 19-Jan-2019 08:58
Send private message quote this post

This was the e-mail, in case anyone has come across it. She's understandably upset as it contained her password.

 

 

 

 

Subject

 

Alert! Email address hacked!

 

 

 

From

 

 

 

 

 

To

 

 

 

 

 

Date

 

Today 06:53

 

 

 

 

 

 

 

 

 

 

 

 

 

Hey There,

As you have seen from the subject of this message your software has been jeopardized. Read through this COMPLETE message to discover how it occurred and exactly what action to take.

I emailed you this message from your own private mail account as you can tell, this means that i posses complete access to it. I furthermore know that one of several online passwords you applied was <removed> for instance. I will inform you how this occurred.
Some time ago you went to a variety of xxx internet sites, one of those particular xxx sites was contaminated with a backdoor, created by myself. This backdoor mounted automatically on your software, providing me COMPLETE access to all your valuable info, accounts, contacts, and so forth.
You can adjust your online passwords however it won't help you, my backdoor will continuously allow me complete accessibility to your system. Continue on and i will inform you how you can shut down this backdoor.

I have obtained all your contacts, documents, information, and so on. Occasionally i also initiated your video camera and saved various clips and shot some images of you whilst you "amused" yourself observing xxx material... you understand what i mean.

Now you posses two possibilities:

Option one: You dismiss this message and i will forward all the really naughty shots and video clips i posses of you to ALL your contacts, together with ALL information i posses on you. Additionally my backdoor will lock up your system and you will never ever be given the chance to utilize it again! You most likely don't want that, picture the dishonor! So see choice number two.

Option two: I've been monitoring you for a long time now so i need you to pay me. To do this please transfer $675 bitcoins to my bitcoin address: 17D6siXNivrAnPbg1KMqkbxR5ZHqyUCvoJ (copy/paste this, it's case sensitive). In case you don't have clue on how to make use of bitcoins simply make use of any kind of online search engine and query "how to purchase bitcoins". You can purchase bitcoins directly using your debit or credit card on lots of websites.
When you opened up this e-mail my setup triggered a timer. Starting right now you have got eight hrs to complete this transaction. When the transaction doesn't arrive inside this time my setup will immediately trigger choice 1, i suppose you do not want that so generate the transaction quickly enough and my setup will instantly erase all the information, documents, contacts, pics and video clips i posses of you on my machine and the backdoor will instantly be shut and you can go on living your life like this never ever occured.

I didn't focus on you, you checked out the wrong site at the wrong time. I reside in a nation where it is extremely hard to find any work, so i do this to help my family members, consider this as a donation.

Your time is counting!

All the best !.

 

 

 


371 posts

Ultimate Geek
+1 received by user: 67


  Reply # 2163560 19-Jan-2019 09:02
One person supports this post
Send private message quote this post

It's them trying their luck. She will likely receive several of these - mine started last year and they're still going


6484 posts

Uber Geek
+1 received by user: 419

Trusted
Subscriber

  Reply # 2163561 19-Jan-2019 09:03
2 people support this post
Send private message quote this post

Ha it's taken this long for you to get one of those, it's a very common scam, ignore it, and ensure your passwords are updated, especially any account using the credentials claimed in the email.

Cyril

3975 posts

Uber Geek
+1 received by user: 1327


  Reply # 2163563 19-Jan-2019 09:04
One person supports this post
Send private message quote this post

But, does he mean USD or NZD ha ha. 

 

Seriously though, I agree with the others, it is a scam. 

 

If I were the scammer and it was legit, I'd have attached a couple of the so called embarrassing photos. 

 

 

 

[edit] and hand in your ubergeek card on the way out :)




4235 posts

Uber Geek
+1 received by user: 939


  Reply # 2163564 19-Jan-2019 09:09
Send private message quote this post

She is worried that they may have hacked her phone. She doesn't use her laptop as it doesn't work properly - they wouldn't have had access to her phone, surely? Even if she (accidentally) went to a dodgy site on her phone it wouldn't work would it?
She has had all her e-mail stored in Orcon's webmail and I am getting her to remove it as I write this but the hacker wouldn't use it would they?


3975 posts

Uber Geek
+1 received by user: 1327


  Reply # 2163566 19-Jan-2019 09:11
2 people support this post
Send private message quote this post

quickymart:

 

She is worried that they may have hacked her phone. She doesn't use her laptop as it doesn't work properly - they wouldn't have had access to her phone, surely? Even if she (accidentally) went to a dodgy site on her phone it wouldn't work would it?
She has had all her e-mail stored in Orcon's webmail and I am getting her to remove it as I write this but the hacker wouldn't use it would they?

 

 

They don't have access to anything, don't worry about it. 

 

This is just a 'phishing' attempt. 

 

 

 

Here you go, a very similar example..

 

https://easykey.uk/hoaxes-and-bogus-warnings/hoax-account-issue-hacker-knows-your-email-password

 

 

 

 




4235 posts

Uber Geek
+1 received by user: 939


  Reply # 2163567 19-Jan-2019 09:13
Send private message quote this post

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.


3975 posts

Uber Geek
+1 received by user: 1327


  Reply # 2163568 19-Jan-2019 09:19
One person supports this post
Send private message quote this post

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

The only thing I'd do, is change the email account password.

 

The hacker has potentially sent millions of these emails. They will make plenty of money from people who get scared and pay up instantly.  

 

If the hacker really had anything of substance, they'd have attached something to prove their claim. That would get a much higher percentage of those who pay up....of course, they can't , so they don't. 


436 posts

Ultimate Geek
+1 received by user: 250

Trusted

  Reply # 2163570 19-Jan-2019 09:27
3 people support this post
Send private message quote this post

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

 

 

My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.


136 posts

Master Geek
+1 received by user: 25


  Reply # 2163578 19-Jan-2019 10:01
quote this post

noroad:

 

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

 

 

My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.

 

 

 

 

I agree.  It is hard to have a different password for every site, but at minimum my email, phone and bank passwords are all unique.  Definitely a scam.




4235 posts

Uber Geek
+1 received by user: 939


  Reply # 2163581 19-Jan-2019 10:09
Send private message quote this post

I knew it was a scam but I think she wanted a second opinion :)
She was mostly concerned as her cellphone was playing up a few months ago until she cleaned it out and locked it down. She thought it may have been related (but I don't see how they could have backed into her cellphone anyway) - I explained most likely it was just a coincidence but I don't think she was 100% reassured.

 

Thanks for all the help by the way and that link, very helpful too.


Glurp
9250 posts

Uber Geek
+1 received by user: 4290

Subscriber

  Reply # 2163594 19-Jan-2019 10:18
One person supports this post
Send private message quote this post

I will add my voice. It is a bluff. I have also had it. Just ignore.

 

 





I reject your reality and substitute my own. - Adam Savage
 


27477 posts

Uber Geek
+1 received by user: 6942

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 2163606 19-Jan-2019 10:37
5 people support this post
Send private message quote this post

marej:

noroad:


quickymart:


Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.



 


My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.



 


I agree.  It is hard to have a different password for every site, but at minimum my email, phone and bank passwords are all unique.  Definitely a scam.



It isn't hard.. Using unique passwords for each site and service is something that is now essential.

 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.