Return-path: <vulpic@isp4mail.com> Envelope-to: wrodriguez@ifprc.com.pe Delivery-date: Sat, 16 Dec 2023 19:58:58 -0300 Received: from [179.6.11.58] (port=1610) by pyme129.pymedns.net with esmtp (Exim 4.96) (envelope-from <vulpic@isp4mail.com>) id 1rEdcT-000QO2-03 for wrodriguez@ifprc.com.pe; Sat, 16 Dec 2023 19:58:58 -0300 Message-ID: <657DE533.1000108@isp4mail.com> Date: Sat, 16 Dec 2023 11:58:11 -0600 From: <vulpic@isp4mail.com> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.23) Gecko/20110922 Thunderbird/3.1.15 MIME-Version: 1.0 To: <wrodriguez@ifprc.com.pe> Content-Type: text/plain; charset=ISO-8859-3; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: Yes, score=30.5 X-Spam-Score: 305 X-Spam-Bar: ++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "pyme129.pymedns.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, my perverted friend. We've actually known each other for a while, at least I know you. You can call me Big Brother or the All-Seeing Eye. I'm a hacker who a few months ago gained access to your device, including your brow [...] Content analysis details: (30.5 points, 7.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.1 BAYES_99 BODY: Bayes spam probability is 99 to 100% [score: 1.0000] 1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <https://www.spamcop.net/bl.shtml?179.6.11.58>] 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [179.6.11.58 listed in bl.score.senderscore.com] 4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [179.6.11.58 listed in dnsbl.sorbs.net] 1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 8.5 KAM_CRIM Extortion Email 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 4.2 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.0 PDS_BTC_ID FP reduced Bitcoin ID 2.5 BITCOIN_SPAM_02 BitCoin spam pattern 02 X-Spam-Flag: YES Subject: ***SPAM*** No reply. Hello, my perverted friend. We've actually known each other for a while, at least I know you. You can call me Big Brother or the All-Seeing Eye. I'm a hacker who a few months ago gained access to your device, including your browser history and webcam. I recorded some videos of you jerking off to highly controversial "adult" videos. I doubt you'd want your family, coworkers, and your entire wrodriguez@ifprc.com.pe contact list to see footage of you pleasuring yourself, especially considering how kinky your favorite "genre". I will also publish these videos on porn sites, they will go viral and it will be physically impossible to remove them from the Internet. How did I do this? Because of your disregard for internet security, I easily managed to install a Trojan on your hard disk. Thanks to this, I was able to access all the data on your device and control it remotely. By infecting one device, I was able to gain access to all the other devices. My spyware is embedded in the drivers and updates its signature every few hours, so no antivirus or firewall can ever detect it. Now I want to offer a deal: a small amount of money in exchange for your former worry free life. Transfer $890 USD to my bitcoin wallet:1LbbzFmNMMFMwsketCSzxAur6yinXBSiQQ As soon as I receive confirmation of the payment, I will delete all the videos that compromise you, remove the virus from all your devices and you will never hear from me again. It's a very small price for not destroying your reputation in the eyes of others, who think that you are a decent man, according to your messengers. You can think of me as some sort of life coach who wants you to start appreciating what you have. You have 48 hours. I will receive a notification as soon as you open this email, and from this moment, the countdown will begin. If you've never dealt with cryptocurrency before, it's very easy. Simply type "cryptocurrency exchange" into a search engine, and then all set. Here's what you shouldn't do: - Don't reply to my email. It was sent from a temporary email account. - Don't call the police. Remember, I have access to all your devices, and as soon as I notice such activity, it will automatically lead to the publishing of all the videos. - Don't try to reinstall your system or reset your device. First of all, I already have the videos, and secondly, as I said, I have remote access to all your devices, and once I notice such an attempt, you know what happens. Remember, crypto addresses are anonymous, so you won't be able to track down my wallet. So long story short, let's resolve this situation with a benefit for me and you. I always keep my word unless someone tries to trick me. Lastly, a little advice for the future. Start taking your online security more seriously. Change your passwords regularly and set up multi-factor authentication on all your accounts. Best wishes.