[Hidden-tech] Need advice on some threatening emails

Tue Apr 23 20:21:21 UTC 2019

Robert,

Although I agree with most of what you’ve said, but sadly there actually are Linux viruses and plenty of other Linux malware, exploits, and security issues — especially with older systems. https://en.wikipedia.org/wiki/Linux_malware#Viruses_and_trojan_horses

I believe that security through obscurity isn’t real security (nor is security through dial-up…). I know what you’re saying, but it is analogous to using STD infection statistics from the CDC to decide if you should wear a condom (to prevent getting an STD). It is always safer to assume you’re at risk and take appropriate measures.  

To the OP, I too have received many of these (in a few variations). I make sure to mark them as junk and I never reply to them. They get old passwords from data breaches and I recommend signing up for https://haveibeenpwned.com (or similar service) which helps to monitor when your account information has been found on the dark web...

All this is my opinion, and I’m open to those that differ — but I thought I’d chime in.

Matt
––––––––––––––––––––––––––––––––

Matt Jacobson
matt at jacobson.net

> On Apr 23, 2019, at 3:46 PM, Robert Heller via Hidden-discuss <hidden-discuss at lists.hidden-tech.net> wrote:
> 
> I have gotten these and I *know* the sender has no access to either my E-Mail
> or any of my computers and that it is in fact impossible for this person to
> have gotten the sort of info he claims (there is no way for him to capture a
> video from my laptop's camera *over a dialup connection* (it would have taken
> him *hours* to transfer even a *short* video). And he is not going to be
> installing any malware on my *old* CentOS 6 Linux system (even if he had an
> actually "modern" Linux malware [there are no Linux viruses], it would
> probably fail to run because my version of glibc is too old and my kernel is
> also too old, and this assumes he can get past my firewall, etc.).
> 
> I *strongly* suspect that this is a bluff.
> 
> At Tue, 23 Apr 2019 15:32:40 +0000 (UTC) Izzy G <izzygesell at yahoo.com <mailto:izzygesell at yahoo.com>> wrote:
> 
>> 
>> 
>> 
>> Hi Folks, 
>> 
>> I've gotten some threatening emails and am not sure how best to respond. I have changed the pw.  one example (of 3 or 4 similar messages) are below. First one came in a few day sago and today there are 4 of them. Please advise.
>> Many Thanks,Izzy    
>> izzygesell at yahoo.com
>> 
>> Sample 1: Hello,As you may have noticed, I sent this email from your email account (if you didn't see, check the from Sender email ID.)
>> 
>> In other words, I have full access to your email account.
>> 
>> I infected you with a malware (RAT) / (Remote Administration Tool), a few months back when you visited an adult site, and since then, I have been observing your actions.
>> 
>> The malware gave me full access and control over your system, meaning, I can see everything on your screen, turn on your camera or microphone and you won't even notice about it.
>> 
>> I have also access to all your contacts.
>> I made a video showing both you (through your webcam) and the video you were watching (on the screen) while statisfying yourself.
>> I can send this video to all your contacts (email, social network)!
>> 
>> You can prevent me from doing this.
>> 
>> To stop me, transfer exactly 900$ with the current (BTC) BITCOIN price, to my bitcoin address.
>> I think it's a very good price compared to the damage, hell and suffering, it will bring into your life!
>> 
>> If you do not know how to get bitcoin, Google - "How to buy Bitcoin".
>> Your wallet you can create here: www.login.blockchain.com/en/#/signup/ - to receive and send the bitcoin.
>> 
>> My bitcoin adress is: 17jHsGecV53ro2LGzo53s5trTH6Qf3gksS
>> 
>> After receiving the payment, I will delete the video, and we will forget everything!
>> I give you 8 days to get the bitcoins.
>> Since I already have access to your system, I know when you read this email.
>> 
>> Don't share this email with anyone, this is our little secret!
>> 
>> MsgID: 0639343481
>> 
>> 
>> 
>> MIME-Version: 1.0
>> 
>> _______________________________________________
>> Hidden-discuss mailing list - home page: http://www.hidden-tech.net <http://www.hidden-tech.net/>
>> Hidden-discuss at lists.hidden-tech.net <mailto:Hidden-discuss at lists.hidden-tech.net>
>> 
>> You are receiving this because you are on the Hidden-Tech Discussion list.
>> If you would like to change your list preferences, Go to the Members
>> page on the Hidden Tech Web site.
>> http://www.hidden-tech.net/members <http://www.hidden-tech.net/members>
>> 
>> 
> 
> -- 
> Robert Heller             -- 978-544-6933
> Deepwoods Software        -- Custom Software Services
> http://www.deepsoft.com/ <http://www.deepsoft.com/>  -- Linux Administration Services
> heller at deepsoft.com <mailto:heller at deepsoft.com>       -- Webhosting Services
> 
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net <http://www.hidden-tech.net/>
> Hidden-discuss at lists.hidden-tech.net <mailto:Hidden-discuss at lists.hidden-tech.net>
> 
> You are receiving this because you are on the Hidden-Tech Discussion list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members <http://www.hidden-tech.net/members>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20190423/e271c0aa/attachment-0001.html>