20190530_PHISHING_SCAM_1

Hi, stranger!

I hacked your device, because I sent you this message from your account.
If you have already changed your password, my malware will be intercepts it every time.

You may not know me, and you are most likely wondering why you are receiving this email, right?
In fact, I posted a malicious program on adults (pornography) of some websites, and you know that you visited these websites to enjoy
(you know what I mean).

While you were watching video clips,
my trojan started working as a RDP (remote desktop) with a keylogger that gave me access to your screen as well as a webcam.

Immediately after this, my program gathered all your contacts from messenger, social networks, and also by e-mail.

What I've done?
I made a double screen video.
The first part shows the video you watched (you have good taste, yes ... but strange for me and other normal people),
and the second part shows the recording of your webcam.

What should you do?

Well, I think $550 (USD dollars) is a fair price for our little secret.
You will make a bitcoin payment (if you don't know, look for "how to buy bitcoins" on Google).

BTC Address: 19aT6f2hkZ8AGDYhFAdYtVYRj7kFhLBuVV
(This is CASE sensitive, please copy and paste it)

Remarks:
You have 2 days (48 hours) to pay. (I have a special code, and at the moment I know that you have read this email).

If I don't get bitcoins, I will send your video to all your contacts, including family members, colleagues, etc.
However, if I am paid, I will immediately destroy the video, and my trojan will be destruct someself.

If you want to get proof, answer "Yes!" and resend this letter to youself.
And I will definitely send your video to your any 19 contacts.

This is a non-negotiable offer, so please do not waste my personal and other people's time by replying to this email.

Bye!




Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Thu, 30 May 2019 15:39:46 -0500
Received: from MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Thu, 30 May 2019 15:39:46 -0500
Received: from gate.forward.smtp.iad3a.emailsrvr.com (204.232.172.40) by
 MBX12D-ORD1.mex08.mlsrvr.com (172.29.9.42) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Thu, 30 May 2019 15:39:46 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [92.222.235.178]
Authentication-Results: smtp8.gate.iad3a.rsapps.net; iprev=pass policy.iprev="92.222.235.178"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="xiaomiromania.com"; dkim=pass header.d=xiaomiromania.com; dmarc=none (p=nil; dis=none) header.from=
X-Suspicious-Flag: NO
X-Classification-ID: 0f0a0b98-831b-11e9-be76-525400b8fe03-1-1
Received: from [92.222.235.178] ([92.222.235.178:33081] helo=xiaomiromania.com)
	by smtp8.gate.iad3a.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id A4/E8-30773-19F30FC5; Thu, 30 May 2019 16:39:45 -0400
Received: from xiaomiromania.com (unknown [202.21.32.137])
	by server.localdomain (Postfix) with ESMTPA id EF59912C8C37
	for <>; Thu, 30 May 2019 22:17:39 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xiaomiromania.com;
	s=default; t=1559247460;
	bh=MbftWQASwbWSIAVyA5D0UWclsGGKWFthZIEdSZiF8uA=; l=1898;
	h=From:To:Subject;
	b=hjgJiCEoj57ajQWnurGkfG75WfOPAISFWkVC3jm7FD6vobEKY3btVsz6sk7WllYVX
	 Ip+ineQzY2FXH2vgy1EVNZlECH5ATpvzU98ejEbtZYs0nbqgzg7aGi0k3VracI2o+B
	 YcsofMJaH7VdWDmnLtns2nr8NOXHoTBjEiIBYgPQ=
Reply-To: <>
From:
To:
Subject: Be sure to read this message! Your personal data is threatened!
Date: Fri, 31 May 2019 01:47:36 +0530
Message-ID: <20190531014736.5A8D5B9D4F0F7268@>
MIME-Version: 1.0
X-MS-Exchange-Organization-Network-Message-Id: 117a2646-267a-484b-409f-08d6e53ef3d6
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1514100;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX12D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit