Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


quickymart

13957 posts

Uber Geek

ID Verified

#245113 19-Jan-2019 08:51
Send private message

Morning,

 

My wife received an e-mail this morning from her (Orcon) address to her Orcon address. The subject was "Alert e-mail address hacked". It then proceeded to demand money, explaining they had hacked into her account and had her information. The message included her password,which is what concerned about. The jerk who sent her the message is demanding 675 Bitcoin dollars or he will send every picture she has ever taken (he says he logged into her phone to do this) to every contact on her list.

 

Thing is, her phone has security on - but could this happen? I've told her to change has passwords already. Has anyone else had this?


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
snnet
1410 posts

Uber Geek


  #2163556 19-Jan-2019 08:54
Send private message

They're scamming. Yes they might have the password or a variant of it but it's from lists that have been purchased or distributed on the "dark net".

 

Put her email into www.haveibeenpwned.com

 

and scroll to the bottom to see where the data breaches came from

 

 




dfnt
1512 posts

Uber Geek

Lifetime subscriber

  #2163558 19-Jan-2019 08:57
Send private message

It hasn't been hacked

 

Her account is probably one of many that have been compromised on a website with weak security. Then all said spammer does is send an email with the users password, they've obtained from password lists, hoping they fall for it and send them money.

 

 

 

Just change passwords, and ignore the email. Start using a password manager as well.

 

You can see where her email has been compromised here https://haveibeenpwned.com/

 

 


quickymart

13957 posts

Uber Geek

ID Verified

  #2163559 19-Jan-2019 08:58
Send private message

This was the e-mail, in case anyone has come across it. She's understandably upset as it contained her password.

 

 

 

 

Subject

 

Alert! Email address hacked!

 

 

 

From

 

 

 

 

 

To

 

 

 

 

 

Date

 

Today 06:53

 

 

 

 

 

 

 

 

 

 

 

 

 

Hey There,

As you have seen from the subject of this message your software has been jeopardized. Read through this COMPLETE message to discover how it occurred and exactly what action to take.

I emailed you this message from your own private mail account as you can tell, this means that i posses complete access to it. I furthermore know that one of several online passwords you applied was <removed> for instance. I will inform you how this occurred.
Some time ago you went to a variety of xxx internet sites, one of those particular xxx sites was contaminated with a backdoor, created by myself. This backdoor mounted automatically on your software, providing me COMPLETE access to all your valuable info, accounts, contacts, and so forth.
You can adjust your online passwords however it won't help you, my backdoor will continuously allow me complete accessibility to your system. Continue on and i will inform you how you can shut down this backdoor.

I have obtained all your contacts, documents, information, and so on. Occasionally i also initiated your video camera and saved various clips and shot some images of you whilst you "amused" yourself observing xxx material... you understand what i mean.

Now you posses two possibilities:

Option one: You dismiss this message and i will forward all the really naughty shots and video clips i posses of you to ALL your contacts, together with ALL information i posses on you. Additionally my backdoor will lock up your system and you will never ever be given the chance to utilize it again! You most likely don't want that, picture the dishonor! So see choice number two.

Option two: I've been monitoring you for a long time now so i need you to pay me. To do this please transfer $675 bitcoins to my bitcoin address: 17D6siXNivrAnPbg1KMqkbxR5ZHqyUCvoJ (copy/paste this, it's case sensitive). In case you don't have clue on how to make use of bitcoins simply make use of any kind of online search engine and query "how to purchase bitcoins". You can purchase bitcoins directly using your debit or credit card on lots of websites.
When you opened up this e-mail my setup triggered a timer. Starting right now you have got eight hrs to complete this transaction. When the transaction doesn't arrive inside this time my setup will immediately trigger choice 1, i suppose you do not want that so generate the transaction quickly enough and my setup will instantly erase all the information, documents, contacts, pics and video clips i posses of you on my machine and the backdoor will instantly be shut and you can go on living your life like this never ever occured.

I didn't focus on you, you checked out the wrong site at the wrong time. I reside in a nation where it is extremely hard to find any work, so i do this to help my family members, consider this as a donation.

Your time is counting!

All the best !.

 

 

 




snnet
1410 posts

Uber Geek


  #2163560 19-Jan-2019 09:02
Send private message

It's them trying their luck. She will likely receive several of these - mine started last year and they're still going


cyril7
9058 posts

Uber Geek

ID Verified
Trusted
Subscriber

  #2163561 19-Jan-2019 09:03
Send private message

Ha it's taken this long for you to get one of those, it's a very common scam, ignore it, and ensure your passwords are updated, especially any account using the credentials claimed in the email.

Cyril

surfisup1000
5288 posts

Uber Geek


  #2163563 19-Jan-2019 09:04
Send private message

But, does he mean USD or NZD ha ha. 

 

Seriously though, I agree with the others, it is a scam. 

 

If I were the scammer and it was legit, I'd have attached a couple of the so called embarrassing photos. 

 

 

 

[edit] and hand in your ubergeek card on the way out :)


quickymart

13957 posts

Uber Geek

ID Verified

  #2163564 19-Jan-2019 09:09
Send private message

She is worried that they may have hacked her phone. She doesn't use her laptop as it doesn't work properly - they wouldn't have had access to her phone, surely? Even if she (accidentally) went to a dodgy site on her phone it wouldn't work would it?
She has had all her e-mail stored in Orcon's webmail and I am getting her to remove it as I write this but the hacker wouldn't use it would they?


 
 
 

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.
surfisup1000
5288 posts

Uber Geek


  #2163566 19-Jan-2019 09:11
Send private message

quickymart:

 

She is worried that they may have hacked her phone. She doesn't use her laptop as it doesn't work properly - they wouldn't have had access to her phone, surely? Even if she (accidentally) went to a dodgy site on her phone it wouldn't work would it?
She has had all her e-mail stored in Orcon's webmail and I am getting her to remove it as I write this but the hacker wouldn't use it would they?

 

 

They don't have access to anything, don't worry about it. 

 

This is just a 'phishing' attempt. 

 

 

 

Here you go, a very similar example..

 

https://easykey.uk/hoaxes-and-bogus-warnings/hoax-account-issue-hacker-knows-your-email-password

 

 

 

 


quickymart

13957 posts

Uber Geek

ID Verified

  #2163567 19-Jan-2019 09:13
Send private message

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.


surfisup1000
5288 posts

Uber Geek


  #2163568 19-Jan-2019 09:19
Send private message

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

The only thing I'd do, is change the email account password.

 

The hacker has potentially sent millions of these emails. They will make plenty of money from people who get scared and pay up instantly.  

 

If the hacker really had anything of substance, they'd have attached something to prove their claim. That would get a much higher percentage of those who pay up....of course, they can't , so they don't. 


noroad
951 posts

Ultimate Geek

Trusted

  #2163570 19-Jan-2019 09:27
Send private message

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

 

 

My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.


marej
186 posts

Master Geek


  #2163578 19-Jan-2019 10:01

noroad:

 

quickymart:

 

Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.

 

 

 

 

My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.

 

 

 

 

I agree.  It is hard to have a different password for every site, but at minimum my email, phone and bank passwords are all unique.  Definitely a scam.


quickymart

13957 posts

Uber Geek

ID Verified

  #2163581 19-Jan-2019 10:09
Send private message

I knew it was a scam but I think she wanted a second opinion :)
She was mostly concerned as her cellphone was playing up a few months ago until she cleaned it out and locked it down. She thought it may have been related (but I don't see how they could have backed into her cellphone anyway) - I explained most likely it was just a coincidence but I don't think she was 100% reassured.

 

Thanks for all the help by the way and that link, very helpful too.


Rikkitic
Awrrr
18660 posts

Uber Geek

Lifetime subscriber

  #2163594 19-Jan-2019 10:18
Send private message

I will add my voice. It is a bluff. I have also had it. Just ignore.

 

 





Plesse igmore amd axxept applogies in adbance fir anu typos

 


 


sbiddle
30853 posts

Uber Geek

Retired Mod
Trusted
Biddle Corp
Lifetime subscriber

  #2163606 19-Jan-2019 10:37
Send private message

marej:

noroad:


quickymart:


Her main concern is she stored all of her e-mail in that mailbox and the hacker would have had access to it as well as all of her contacts.



 


My 2c - change the email password, instruct here to never re-use passwords across services then carry on with life.



 


I agree.  It is hard to have a different password for every site, but at minimum my email, phone and bank passwords are all unique.  Definitely a scam.



It isn't hard.. Using unique passwords for each site and service is something that is now essential.

 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.