What are you using for spam? And was this for a personal or business email account?
Email received from supposed darknet hacker?
- Thread starter mellowtones242
- Start date
Malware Analysis Archive
78 Replies
69,384 Views
What are you using for spam? And was this for a personal or business email account?
I received one and after I changed my password, I got another one. I checked my sent file, and the emails were there. It seems to me like he is actually using my email, and has been able to override my pw changes. I don’t have a webcam or anything but am concerned about the possiblity of ratware or malware. One mentioned a rat.
If the hoax mail comes (apparently) from your same email address, it doesn't mean that the criminal has violated your mail box. It is simply a trick, indeed it is very easy to spoof the sender's address of a mail, as already mentioned.
If you are concerned about a Rat/malware infection, try to scan your system with your AV plus some antimalware as Zemana, Malwarebytes or Emsisoft EK.
Does the fact that it showed up in my sent mailbox mean that it was indeed sent from my account? I have had the spoofs before, but those never came from me or showed up in my sent box. As for a scan, does anyone have a suggestion for iPads? We always had norton or mcafee on our laptops.
Some people have said that you know it’s a hoax because the email is not showing up in your sent file. Mine is in the sent file, and I have gotten more even after changing my pw. I am not worried about any of that stuff about webcam etc, but am concerned that there might be malware on my OS now, since they got in even after I changed pw. Can anyone reassure me by telling me how they can get it to show up in my email sent file? I don’t want to worry for nothing, but don’t want a virus or whatever. Thanks.
Lord Skudley
New Member
Got one a couple of hours ago. I know its a spam, it wasn't in my sent file.
Buy what I want to know is: How can I find their email?
Header Info:
Return-Path: <euromsg@euro-msg.info>
Received: from server2.watchesmap.com ([185.24.233.105]) by mx.perfora.net
(mxeueus002 [74.208.5.3]) with ESMTPS (Nemesis) id 0LgWdn-1fhxNi1e4b-00noKh
for <MyEmail>; Wed, 07 Nov 2018 09:04:07 +0100
Received: from server2.watchesmap.com ([185.24.233.105]) by mx.perfora.net
(mxeueus002 [74.208.5.3]) with ESMTPS (Nemesis) id 0LgWdn-1fhxNi1e4b-00noKh
for <MyEmail>; Wed, 07 Nov 2018 09:04:07 +0100
Received: by server2.watchesmap.com (Postfix, from userid 10001)
id DCC418793D; Tue, 6 Nov 2018 11:50:24 -0500 (EST)
To: MyEmail
Subject: MyEmail was hacked.
X-PHP-Originating-Script: 10001:c.php
MIME-Version: 1.0
Content-type:text/html;charset=UTF-8
From: <MyEmail>
Message-Id: <20181106165024.DCC418793D@server2.watchesmap.com>
Date: Tue, 6 Nov 2018 11:50:24 -0500 (EST)
Envelope-To: <MyEmail>
X-Spam-Flag: YES
X-UI-Filterresults: junk:10;V01:K0:Vn5TyDSUsx0=:8az0pCO9UNoHrTki3jeP59fRKoPg
I've tried various forms of the .com,.net, .info but keep getting a bounce back.
BTW, I'm also a 419Baiter...
I
just
want
to
play
.....
Buy what I want to know is: How can I find their email?
Header Info:
Return-Path: <euromsg@euro-msg.info>
Received: from server2.watchesmap.com ([185.24.233.105]) by mx.perfora.net
(mxeueus002 [74.208.5.3]) with ESMTPS (Nemesis) id 0LgWdn-1fhxNi1e4b-00noKh
for <MyEmail>; Wed, 07 Nov 2018 09:04:07 +0100
Received: from server2.watchesmap.com ([185.24.233.105]) by mx.perfora.net
(mxeueus002 [74.208.5.3]) with ESMTPS (Nemesis) id 0LgWdn-1fhxNi1e4b-00noKh
for <MyEmail>; Wed, 07 Nov 2018 09:04:07 +0100
Received: by server2.watchesmap.com (Postfix, from userid 10001)
id DCC418793D; Tue, 6 Nov 2018 11:50:24 -0500 (EST)
To: MyEmail
Subject: MyEmail was hacked.
X-PHP-Originating-Script: 10001:c.php
MIME-Version: 1.0
Content-type:text/html;charset=UTF-8
From: <MyEmail>
Message-Id: <20181106165024.DCC418793D@server2.watchesmap.com>
Date: Tue, 6 Nov 2018 11:50:24 -0500 (EST)
Envelope-To: <MyEmail>
X-Spam-Flag: YES
X-UI-Filterresults: junk:10;V01:K0:Vn5TyDSUsx0=:8az0pCO9UNoHrTki3jeP59fRKoPg
I've tried various forms of the .com,.net, .info but keep getting a bounce back.
BTW, I'm also a 419Baiter...
I
just
want
to
play
.....
Lord Skudley
New Member
NOTE: I own the domain that thee email is attached to, and checked all my server connections and activity, nothing (going to contact my provider next).
Malwarebytes recently published an article on this issue which I thought would be of interest on this thread:
Sextortion emails: They're probably not watching you - Malwarebytes Labs
Sextortion emails: They're probably not watching you - Malwarebytes Labs
?
Cybercriminals Attacking Through Adult Sites | Comodo Cybersecurity
Heres recent post from comodo blogs
Heres recent post from comodo blogs
I got this today from my own email address. The Sent folder doesn't contain this email, so unless they deleted it after sending it, it's fake, right?
Hello
I'm a hacker who cracked your e-mail as well as device a few weeks back.
You typed in your password on one of the web-sites you visited, and I intercepted this.
Here is your password from (my email address) on moment of compromise: (the password I had used a few years ago for various email addresses and internet forums).
No doubt you can can change it, or even already changed it.
Still this doesn't matter, my own malware updated it every time.
Do not necessarily attempt to make contact with me personally or even find me, it is impossible, since I sent this mail from your email account.
By way of your e mail, I uploaded harmful computer code to your Operation System.
I saved all of your contacts together with friends, acquaintances, family members and also the full record of visits to the World wide web resources.
Also I set up a Trojan on your device.
You are not my only victim, I normally lock computers and ask for the ransom.
But I ended up being struck by the web pages of intimate content material that you often pay a visit to.
I am in shock of your fantasies! I've never observed anything like this!
Thus, when you had enjoyment on piquant web pages (you know what I mean!) I created screenshot with using my program by your camera of yours device.
Subsequently, I combined them to the content of the particular currently seen site.
Now there will certainly be giggling when I send these photographs to your friends!
Yet I know you wouldn't like it.
Consequently, I expect payment from you intended for my silence.
I think $900 is an satisfactory cost for this!
Pay with Bitcoin.
My Bitcoin wallet is 1KPuD6Zb26RauJYAzm8Hihfn3PtQXLVQg3
In case you do not really know how to do this - enter in to Google 'how to send money to the bitcoin wallet'. It isn't difficult.
After getting the given amount, all your info will be straight away destroyed automatically. My malware will also eliminate itself from your operating-system.
My Virus possess auto alert, so I know when this e-mail is opened.
I give you 2 days (Forty-eight hrs) in order to make a payment.
If this does not take place - all your associates will get crazy shots from your darker secret life and your device will be blocked as well after 48 hours.
Don't be foolish!
Cops or buddies won't aid you for certain ...
P.S I can give you recommendation with regard to the future. Don't enter your security passwords on unsafe internet sites.
I wish for your discretion.
Bon voyage.
I'm currently using the trial version of Avira Prime and I tried to do a full scan but it's taking a very long time to scan (like, almost an entire day). Should I buy a license for Avira or for another security suite? I'm thinking about buying either ZoneAlarm's Anti-Ransomware or Hitman Pro Alert. Which one offers better protection?
Hello
I'm a hacker who cracked your e-mail as well as device a few weeks back.
You typed in your password on one of the web-sites you visited, and I intercepted this.
Here is your password from (my email address) on moment of compromise: (the password I had used a few years ago for various email addresses and internet forums).
No doubt you can can change it, or even already changed it.
Still this doesn't matter, my own malware updated it every time.
Do not necessarily attempt to make contact with me personally or even find me, it is impossible, since I sent this mail from your email account.
By way of your e mail, I uploaded harmful computer code to your Operation System.
I saved all of your contacts together with friends, acquaintances, family members and also the full record of visits to the World wide web resources.
Also I set up a Trojan on your device.
You are not my only victim, I normally lock computers and ask for the ransom.
But I ended up being struck by the web pages of intimate content material that you often pay a visit to.
I am in shock of your fantasies! I've never observed anything like this!
Thus, when you had enjoyment on piquant web pages (you know what I mean!) I created screenshot with using my program by your camera of yours device.
Subsequently, I combined them to the content of the particular currently seen site.
Now there will certainly be giggling when I send these photographs to your friends!
Yet I know you wouldn't like it.
Consequently, I expect payment from you intended for my silence.
I think $900 is an satisfactory cost for this!
Pay with Bitcoin.
My Bitcoin wallet is 1KPuD6Zb26RauJYAzm8Hihfn3PtQXLVQg3
In case you do not really know how to do this - enter in to Google 'how to send money to the bitcoin wallet'. It isn't difficult.
After getting the given amount, all your info will be straight away destroyed automatically. My malware will also eliminate itself from your operating-system.
My Virus possess auto alert, so I know when this e-mail is opened.
I give you 2 days (Forty-eight hrs) in order to make a payment.
If this does not take place - all your associates will get crazy shots from your darker secret life and your device will be blocked as well after 48 hours.
Don't be foolish!
Cops or buddies won't aid you for certain ...
P.S I can give you recommendation with regard to the future. Don't enter your security passwords on unsafe internet sites.
I wish for your discretion.
Bon voyage.
I'm currently using the trial version of Avira Prime and I tried to do a full scan but it's taking a very long time to scan (like, almost an entire day). Should I buy a license for Avira or for another security suite? I'm thinking about buying either ZoneAlarm's Anti-Ransomware or Hitman Pro Alert. Which one offers better protection?
@alakazam yes its fake, they have gotten your previous password from data breach and the bots just spam those emails
you can check your email here to see data breach you have been part of : Have I Been Pwned: Check if your email has been compromised in a data breach
Its recommended to chance your password of that email adress & i would personaly suggest to enable 2 factor authentication
you can check your email here to see data breach you have been part of : Have I Been Pwned: Check if your email has been compromised in a data breach
Its recommended to chance your password of that email adress & i would personaly suggest to enable 2 factor authentication
These emails always appear to come from your email address. However, they are not actually being sent from your email, they just spoof your email address to make it look like you are the sender.
Thank you so much! I was freaked out at the start when I first read this email but you all are experts and it makes tons of sense that this is just fake.
As mentioned above don’t worry. FYI Have I Been Pwned: Check if your email has been compromised in a data breach
Recently browsing
Members who viewed this thread in the last 5 minutes
You may also like...
-
-
-
-
Extended Trial pCloud Premium Plan 500 GB FREE - 3 Months -
Scams & Phishing Sextortion scams are booming again