20181019_PHISHING_SCAM_1

Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Mailbox Transport; Fri, 19 Oct 2018 08:28:51 -0500
Received: from MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3; Fri, 19 Oct 2018 08:28:50 -0500
Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
 MBX02C-ORD1.mex08.mlsrvr.com (172.29.9.14) with Microsoft SMTP Server (TLS)
 id 15.0.1367.3 via Frontend Transport; Fri, 19 Oct 2018 08:28:50 -0500
Return-Path:
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To: REMOVED
X-Originating-Ip: [138.36.122.83]
Authentication-Results: smtp9.gate.ord1c.rsapps.net; iprev=pass policy.iprev="138.36.122.83"; spf=fail smtp.mailfrom="REMOVED" smtp.helo="138-36-122-83.static2.urupesnet.com.br"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=REMOVED
X-Suspicious-Flag: NO
X-Classification-ID: e9c99d80-d3a2-11e8-bcf7-0026b95bddb7-1-1
Received: from [138.36.122.83] ([138.36.122.83:44044] helo=138-36-122-83.static2.urupesnet.com.br)
	by smtp9.gate.ord1c.rsapps.net (envelope-from <REMOVED>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTP
	id CE/C7-28307-21CD9CB5; Fri, 19 Oct 2018 09:28:50 -0400
Message-ID: <54969AE4D558E8AB69651B2AA7175496@MHV4GD93SEQ>
From: <REMOVED>
To: OLD_PASSWORD_HERE <REMOVED>
Subject: REMOVED is hacked
Date: Fri, 19 Oct 2018 06:14:51 -0400
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-MS-Exchange-Organization-Network-Message-Id: d3165712-303d-47d2-aca1-08d635c6ceb1
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1457300;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX02C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit

Hello!

My nickname in darknet is rickard15.
I hacked this mailbox more than six months ago,
through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.

So, your password from REMOVED is OLD_PASSWORD_HERE

Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.

I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.

I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!

During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!

I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $881 is quite a fair price to destroy the dirt I created.

Send the above amount on my BTC wallet (bitcoin): 1EZS92K4xJbymDLwG4F7PNF5idPE62e9XY
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.

Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it!

Since reading this letter you have 48 hours!
After your reading this message, I'll receive an automatic notification that you have seen the letter.

I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!