I have been getting emails from my own email ID threatening me that my email account has been hacked, And I need to make payment else the hacker will send dirty photos to all my contacts.
The email is filtered to Spam folder. I checked my Sent box to find no email as outbound to myself. Checked CPanel for login time and IP. All are fine there. Checked all settings of our domain which are properly configured.
This is surely
Backscatter spam. I want to know is why the sender is still able to spook my email ID even though we have ensured all our settings are in proper order.
What should we do more on domain level to block such tactics. I hope the sender is not able to spook email ID to others acting as myself.
Below is the property and complete email.
Delivered-To:
mxxx@9t9it.com
Received-SPF: softfail (zoho.com: transitioning domain of 9t9it.com does not designate 45.65.244.130 as permitted sender) client-ip=45.65.244.130; envelope-from=
mxxx
@9t9it.com; helo=215.71.101.148.d.dyn.claro.net.do;
Authentication-Results: mx.zohomail.com;
spf=softfail (zoho.com: transitioning domain of 9t9it.com does not designate 45.65.244.130 as permitted sender) smtp.mailfrom=
mxxx
@9t9it.com
Received: from 215.71.101.148.d.dyn.claro.net.do (45.65.244.130 [45.65.244.130]) by mx.zohomail.com
with SMTP id 1541158455210752.9292810903648; Fri, 2 Nov 2018 04:34:15 -0700 (PDT)
Date: 2 Nov 2018 02:08:34 -0500
MIME-Version: 1.0
Subject: Change your password immediately. Your account has been hacked.
Priority: normal
X-mailer: Pegasus Mail for Windows (4.41)
Content-type: text/plain; charset="ibm852"
Content-transfer-encoding: 8BIT
Content-description: Mail message body
I greet you!
I have bad news for you.
11/08/2018 - on this day I hacked your operating system and got full access to your account
mxxx
@9t9it.com
It is useless to change the password, my malware intercepts it every time.
How it was:
In the software of the router to which you were connected that day, there was a vulnerability.
I first hacked this router and placed my malicious code on it.
When you entered in the Internet, my trojan was installed on the operating system of your device.
After that, I made a full dump of your disk (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).
A month ago, I wanted to lock your device and ask for a small amount of money to unlock.
But I looked at the sites that you regularly visit, and came to the big delight of your favorite resources.
I'm talking about sites for adults.
I want to say - you are a big pervert. You have unbridled fantasy!
After that, an idea came to my mind.
I made a screenshot of the intimate website where you have fun (you know what it is about, right?).
After that, I took off your joys (using the camera of your device). It turned out beautifully, do not hesitate.
I am strongly belive that you would not like to show these pictures to your relatives, friends or colleagues.
I think $839 is a very small amount for my silence.
Besides, I spent a lot of time on you!
I accept money only in Bitcoins.
My BTC wallet: 17vzpL7n29egdeJF1hvUE4tKV81MqsW4wF
You do not know how to replenish a Bitcoin wallet?
In any search engine write "how to send money to btc wallet".
It's easier than send money to a credit card!
For payment you have a little more than two days (exactly 50 hours).
Do not worry, the timer will start at the moment when you open this letter. Yes, yes .. it has already started!
After payment, my virus and dirty photos with you self-destruct automatically.
Narrative, if I do not receive the specified amount from you, then your device will be blocked, and all your contacts will receive a photos with your "joys".
I want you to be prudent.
- Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)
- Do not try to contact me (this is not feasible, I sent you an email from your account)
- Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.
P.S. I guarantee you that I will not disturb you again after payment, as you are not my single victim.
This is a hacker code of honor.
From now on, I advise you to use good antiviruses and update them regularly (several times a day)!
Don't be mad at me, everyone has their own work.
Farewell.