Sextortion Scams Now Using Password Protected Evidence Files

New variants of the sextortion scams are now attaching password protected zip files that contain alleged proof that the sender has a video recording of the recipient. While you cannot view the individual files in the archive, you can see what they are named, which can cause recipients to become scared enough to make a payment.

The main goal of a sextortion scam is to scare the recipient of the email into making a payment in order to avoid the embarrassment of an alleged video being sent to their friends and family.

While those of you who read BleepingComputer or are involved in computer security know that these emails are scams, I have received many emails and calls from people who are concerned that these emails may be true. The attackers know this too, so are doing everything they can to push the recipients into being concerned enough to make a payment.

This new sextortion variant was first reported by security site MyOnlineSecurity and is utilizing email subjects like "RE: Case #48942113 xxx@domain.com You have been warned many times - 07/04/2019 10:57:20" and state that they have webcam video of you utilizing porn sites. They then threaten to share this video with all of your contacts if you do not send them $660 USD in bitcoins.

Attached to these emails is a password protected zip file that contains numerous files that pretend to be the proof that the hacker has gained access to your computer. Some of the files in the password protected ZIP attachment are named Camera-Vid.avi, contacts.txt, debt.txt, Google_Chrome_Default.txt, information.txt, and screenshot.jpg.

These files, though, cannot be accessed unless you purchase the password from them. Enclosed in the spam email will be a link that when clicked on will  bring you to a site called cryptonator.com. This site allows you to purchase the alleged password for the zip file for $50 USD.

Even though these emails can be scary to those who receive them, it is important to remember that they are just scams.

They are being sent to many people, they are just trying to scare you into making a payment, and you should just mark them as spam and delete them.

IOCs

The full text of this email is:

Camera ready,Notification: #48942113 - 07/04/2019
Status: Waiting for Reply 74xuNaOy8A2f21wLnBmGkG3WrC6Ry53Xu8_Priority: Normal
=-=--=-=-=--=-=-=-=-=-=-=-=--=-=-=--=-=-=-=-=-=-=-=-=-=--=-=-=--=-=-=-=

Hi there.. .

   
This email won't acquire too much of your efforts, and so straight to the issue. I obtained a video of you flogging the dolphin when at a pornpage you are visited, thanks to an incredible arse software program I've managed to put on a few web sites with that type of content. 

You hit play button and all of the cams and a microphone begin their work in addition it saves every fucking element through your pc, for example contact information, account details or shit such as that, guess just where i got this email address from?) Therefore now we all know just who i will deliver that to, if you aren't gonna negotiate this along with me.

I am going to place a account wallet address down be!
 low so that you can hit me 660 $ within 2 days utmost via bitcoin. See, it isn't that large of a total to pay, guess that makes me not that terrible of a person.

 You are allowed to try and do what ever the shit you wish to, yet if i won't see the total within the period of time mentioned above, clearly... you already realize what will happen.

 And so it is your choice right now. Now i'm not going to proceed through every detail and shit, just simply ain't got precious time for this and also you likely know that web is filled with mail such as this, therefore it is as well your decision to believe in this or not, there may be only one way to uncover.

This is the bitcoin wallet address- 1J7uHaMeKV9aoYLB5bLmTUuzYeY7Cbicvf 


Proof attached!

Password in the video >>

Come up with a new password for your!
  email .. .