API tools faq
paste
wavellan

20260608_EMAIL_SCAM_1

wavellan
Jun 8th, 2026 (edited)
83
0
Never
4
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.54 KB | None | 0 0
raw download clone embed print report
  1. Hello,
  2.  
  3. We are the ShinyHunters hacking group.
  4. A few months ago, we gained access to your devices and started monitoring your online activities.
  5.  
  6. What happened:
  7. We gained access to the Charter Communications (Spectrum) database where you have an account and easily accessed your email.
  8. You weren't very careful about the links you opened.
  9. A week later, we installed an exploit on your devices, including your phone, giving us access to your microphone,
  10. camera, keyboard, and all your data.
  11. We have your documents, photos, browsing history, conversations, and contact list.
  12.  
  13. Among other things, we discovered that you visit adult websites and watch explicit videos.
  14. We managed to record you and created videos of you pleasuring yourself.
  15. With a few clicks, we can share these videos with your friends,
  16. colleagues, and family or even make them public.
  17.  
  18. Proposal:
  19. Send us $2000 in Bitcoin to the following wallet:
  20. 19n6rpc8Tgs6XT1xEEJsd59TiqtkgSWNxy
  21.  
  22. We'll delete everything immediately.
  23. You have 48 hours from the moment you open this email.
  24. Once the payment is received, we'll remove the malware from your devices.
  25. We'll also remove all your personal information from darkweb for you to be safe from now on.
  26.  
  27. What you should NOT do:
  28. Do not reply (email was sent from a hacked account).
  29. Do not contact the police or anyone else—we'll release the videos along with other stuff all over the internet.
  30. Do not try to reset your devices—everything is stored on remote servers.
  31.  
  32. What you don’t need to worry about:
  33. We will see your payment immediately—the wallet is generated specifically for you.
  34. We will not share your videos or other things after payment—there is no reason to continue causing problems.
  35.  
  36. You're not the only one in this situation.
  37. Be smart and cooperate; otherwise, you're going to regret it.
  38.  
  39.  
  40.  
  41.  
  42. Received: from IA1PR05MB10032.namprd05.prod.outlook.com (::1) by
  43. PH0PR05MB8672.namprd05.prod.outlook.com with HTTPS; Sun, 7 Jun 2026 09:11:39
  44. +0000
  45. Received: from BLAPR03CA0119.namprd03.prod.outlook.com (2603:10b6:208:32a::34)
  46. by IA1PR05MB10032.namprd05.prod.outlook.com (2603:10b6:208:3f5::15) with
  47. Microsoft SMTP Server (version=TLS1_2,
  48. cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.8; Sun, 7 Jun 2026
  49. 09:11:37 +0000
  50. Received: from BL6PEPF0001AB52.namprd02.prod.outlook.com
  51. (2603:10b6:208:32a:cafe::2f) by BLAPR03CA0119.outlook.office365.com
  52. (2603:10b6:208:32a::34) with Microsoft SMTP Server (version=TLS1_3,
  53. cipher=TLS_AES_256_GCM_SHA384) id 15.21.92.12 via Frontend Transport; Sun, 7
  54. Jun 2026 09:11:37 +0000
  55. Authentication-Results: spf=pass (sender IP is 211.12.196.78)
  56. smtp.mailfrom=parabox.or.jp; dkim=none (message not signed)
  57. header.d=none;dmarc=pass action=none header.from=parabox.or.jp;compauth=pass
  58. reason=100
  59. Received-SPF: Pass (protection.outlook.com: domain of parabox.or.jp designates
  60. 211.12.196.78 as permitted sender) receiver=protection.outlook.com;
  61. client-ip=211.12.196.78; helo=mxt.ncom.ad.jp; pr=C
  62. Received: from mxt.ncom.ad.jp (211.12.196.78) by
  63. BL6PEPF0001AB52.mail.protection.outlook.com (10.167.241.4) with Microsoft
  64. SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.7
  65. via Frontend Transport; Sun, 7 Jun 2026 09:11:36 +0000
  66. Received: from mxt.ncom.ad.jp (localhost [127.0.0.1])
  67. by mxt.ncom.ad.jp (Postfix) with ESMTP id 4B267112FED
  68. for <>; Sun, 7 Jun 2026 17:51:56 +0900 (JST)
  69. Received: from my-page.ncom.ad.jp (my-page.ncom.ad.jp [219.101.65.207])
  70. by mxt.ncom.ad.jp (Postfix) with SMTP
  71. for <>; Sun, 7 Jun 2026 17:51:56 +0900 (JST)
  72. Received: (qmail 30142 invoked by uid 8989); 7 Jun 2026 17:40:31 +0900
  73. Received: from unknown (HELO fjysf) (211.12.206.133)
  74. by 0 with SMTP; 7 Jun 2026 17:40:31 +0900
  75. Message-ID: <[email protected]>
  76. From: "You've been HACKED" <[email protected]>
  77. To: you <you>
  78. Subject: Important information about your online security
  79. Date: Sun, 7 Jun 2026 01:40:26 -0700
  80. MIME-Version: 1.0
  81. Content-Type: text/plain; charset="utf-8"
  82. Content-Transfer-Encoding: 8bit
  83. X-KSMG-AntiPhishing: not scanned, disabled by settings
  84. X-KSMG-AntiSpam-Interceptor-Info: not scanned
  85. X-KSMG-AntiSpam-Status: not scanned, disabled by settings
  86. X-KSMG-AntiVirus: Kaspersky Secure Mail Gateway, version 2.1.1.8310, not scanned, disabled by settings
  87. X-KSMG-AntiVirus-Status: NotScanned, disabled by settings, skipped
  88. X-KSMG-LinksScanning: not scanned, disabled by settings
  89. X-KSMG-Message-Action: skipped
  90. X-KSMG-Rule-ID: 10
  91. Return-Path: [email protected]
  92. X-MS-Exchange-Organization-ExpirationStartTime: 07 Jun 2026 09:11:36.8364
  93. (UTC)
  94. X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
  95. X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
  96. X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
  97. X-MS-Exchange-Organization-Network-Message-Id:
  98. 9b5967c7-fd65-40e7-3542-08dec474c713
  99. X-EOPAttributedMessage: 0
  100. X-EOPTenantAttributedMessage: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a:0
  101. X-MS-Exchange-Organization-MessageDirectionality: Incoming
  102. X-MS-PublicTrafficType: Email
  103. X-MS-TrafficTypeDiagnostic:
  104. BL6PEPF0001AB52:EE_|IA1PR05MB10032:EE_|PH0PR05MB8672:EE_
  105. X-MS-Exchange-Organization-AuthSource:
  106. BL6PEPF0001AB52.namprd02.prod.outlook.com
  107. X-MS-Exchange-Organization-AuthAs: Anonymous
  108. X-MS-Office365-Filtering-Correlation-Id: 9b5967c7-fd65-40e7-3542-08dec474c713
  109. X-MS-Exchange-Organization-SCL: 5
  110. X-Forefront-Antispam-Report:
  111. CIP:211.12.196.78;CTRY:JP;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mxt.ncom.ad.jp;PTR:mxt.ncom.ad.jp;CAT:PHISH;SFS:(13230040)(704160811799003)(2069299003)(5009299003)(7093399015)(16143499012);DIR:INB;
  112. X-Microsoft-Antispam:
  113. BCL:0;ARA:13230040|704160811799003|2069299003|5009299003|7093399015|16143499012;
  114. X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Jun 2026 09:11:36.2467
  115. (UTC)
  116. X-MS-Exchange-CrossTenant-Network-Message-Id: 9b5967c7-fd65-40e7-3542-08dec474c713
  117. X-MS-Exchange-CrossTenant-Id: 0d4bfd0a-5b8b-4c86-b245-3f11f8ea539a
  118. X-MS-Exchange-CrossTenant-AuthSource:
  119. BL6PEPF0001AB52.namprd02.prod.outlook.com
  120. X-MS-Exchange-CrossTenant-AuthAs: Anonymous
  121. X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
  122. X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR05MB10032
  123. X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.1424434
  124. X-MS-Exchange-Processed-By-BccFoldering: 15.21.0113.000
  125. X-MS-Exchange-ExternalInOutlookResult: NotEnabled
  126. X-Microsoft-Antispam-Mailbox-Delivery:
  127. ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910005)(944506478)(944626604)(4710137)(4715077)(4999163)(920097)(930201)(3100021)(140003);RF:JunkEmail;
  128. X-Microsoft-Antispam-Message-Info:
  129.  
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!