Contact us today!
866-348-2602

Total Tech Care Blog

Total Tech Care has been serving Florida since 2001, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Don’t Be Fooled When Scammers Threaten to Spill a Dirty Little Secret

Don’t Be Fooled When Scammers Threaten to Spill a Dirty Little Secret

What would you do if a stranger claimed to have compromising webcam footage of you and threatened to share it with your contacts? A new, very convincing email scam is making some users very nervous.

The Sextortion Scam
It’s as screwed up as it sounds. A scammer emails you saying that they got access to your passwords, and then started to run amok to see how much trouble they could get you into. They even show you one of your passwords to prove it (the password will likely come from lists found on the dark web from online businesses and services that have been hacked and stolen over the years). Then the scammer admits they’ve been watching what you do on your computer and recording your webcam, and they happened to catch you at a very inopportune time... Well, let’s let the email explain it for us. 

“You don’t know me and you’re thinking why you received this email, right?

Well, I actually placed a malware on the porn website and guess what, you visited this web site to have fun (you know what I mean). While you were watching the video, your web browser acted as a RDP (Remote Desktop) and a keylogger which provided me access to your display screen and webcam. Right after that, my software gathered all your contacts from your Messenger, Facebook account, and email account.

What exactly did I do?

I made a split-screen video. First part recorded the video you were viewing (you’ve got a fine taste haha), and next part recorded your webcam (Yep! It’s you doing nasty things!).

What should you do?

Well, I believe, $1400 is a fair price for our little secret. You’ll make the payment via Bitcoin to the below address (if you don’t know this, search “how to buy bitcoin” in Google).”

The reader is then given the address to a Bitcoin wallet, where they are to send the ransom.

The email continues:

“Important:

You have 24 hours in order to make the payment. (I have an unique pixel within this email message, and right now I know that you have read this email). If I don’t get the payment, I will send your video to all of your contacts including relatives, coworkers, and so forth. Nonetheless, if I do get paid, I will erase the video immidiately [sic]. If you want evidence, reply with “Yes!” and I will send your video recording to your 5 friends. This is a non-negotiable offer, so don’t waste my time and yours by replying to this email.”

This email comes in a few different versions in the wild, but all of them follow the same pattern and end with the same threat… fork over the cash, or everyone will see you in your most private moments.

Is This a Serious Threat?
This is a very real concern for many people, who will be relieved to hear that, no, there is no indication that these threats are for real. The first clue is the fact that the passwords that the email provides are usually a decade old, indicating that they came from some (relatively) ancient database from some long-forgotten hack.

However, in some ways, this is even worse news, because this threat has made a tidy sum of money: as of the 31st of July, the scam had brought in $250,000, as compared to just over $50,000 by the 19th. Clearly, this scam has been plenty effective for the perpetrators, and this won’t deter others from following its example.

Keeping Yourself Safe from an Actual Attack
Granted, this attack is just an unfair wager, but scams like this are more than possible for a criminal who actually means what they say/threaten. As a result, the security lessons we can take away from this particular attack still apply.

The first thing to remember is also the first rule of passwords - change them frequently. Again, this scam has made quite a bit of money based on a total bluff... a bluff that, paid in increments of $1,400, was worth $250,000 and counting. From this, we can infer that quite a few people who received this message had online activities that they wanted to hide, and more critically, that their passwords had remained the same for all those years.

This is an excellent example of why it is so crucial to regularly update your passwords, without repeating them - if an old database is hacked, as happened here, you won’t have to worry if your password is revealed - it won’t be any good anymore.

The second thing to remember? If you aren’t actively using your webcam, keep its lense covered up.

For more best practices to follow, including those that will improve your business’ security, make sure you keep checking back to this blog - and if you want to take more action, reach out to us at 866-348-2602.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Wednesday, 02 April 2025
If you'd like to register, please fill in the username, password and name fields.

Blog Archive

Sign Up for Our Newsletter

  • First Name *
  • Last Name *

      Free Consultation

      Sign up today for a
      FREE Network Consultation

      How secure is your IT infrastructure?
      Let us evaluate it for free!

      Sign up Now!

      Free Consultation
       

      Tag Cloud

      Security Tip of the Week Technology Best Practices Business Computing Cloud Privacy Hackers Productivity Hosted Solutions Software Efficiency Network Security Google Business Microsoft Internet Email Malware Backup Workplace Tips Innovation User Tips Data Computer Mobile Devices Hardware IT Services Disaster Recovery Android VoIP communications Communication Business Continuity IT Support Smartphones Miscellaneous Smartphone Mobile Device Small Business Network Browser Collaboration Productivity Quick Tips Cybersecurity Users Business Management Phishing Windows Upgrade Managed IT Services Data Backup Outsourced IT Ransomware Windows 10 Data Recovery Office Cloud Computing Server Save Money Passwords Windows 10 Virtualization Social Media Saving Money Holiday Tech Term Gadgets Chrome Automation Managed Service Managed IT Services Microsoft Office Facebook Computers Cybercrime Operating System Artificial Intelligence BYOD Health Mobile Device Management Networking Internet of Things IT Support Hacking Wi-Fi Information Technology Remote Information Covid-19 Spam Managed Service Provider Alert Office 365 Telephone Systems Recovery Employer-Employee Relationship Router Bandwidth BDR Social Engineering Mobility App History Encryption Mobile Computing Applications Application Human Resources Law Enforcement Remote Monitoring Big Data Data Breach Password Money Office Tips Blockchain Training Paperless Office VPN How To Government Remote Computing Private Cloud Data Storage Mobile Office Patch Management Managed IT Apps Flexibility Wireless Marketing WiFi Data Security Gmail IT solutions Google Drive Entertainment Website Settings Budget Infrastructure Two-factor Authentication Voice over Internet Protocol Avoiding Downtime Mouse HaaS Vulnerability Windows 7 Word Bring Your Own Device Data Management Work/Life Balance Servers End of Support The Internet of Things Lithium-ion battery Physical Security Education Staff Software as a Service Telephone System Safety Machine Learning HIPAA Sports Redundancy Connectivity Remote Work USB Firewall Keyboard Vendor Virtual Reality Managed Services Apple Display Social Conferencing Save Time User Error Data Protection Employee/Employer Relationship Meetings Scam RMM Cleaning Risk Management Vendor Management Hacker Computer Accessories Unsupported Software Access Control Digital Signage Battery Charger Shadow IT Virtual Assistant DDoS Authentication Legal SharePoint Compliance Computer Care Procurement Internet Exlporer OneNote Net Neutrality Printer Current Events Workplace Strategy Bluetooth Telephony Samsung Customer Service Update PDF Help Desk Environment Printing Value Fax Server Google Docs Proactive IT Identity Theft Electronic Medical Records IT Consultant Managed Services Provider Best Practice Spam Blocking SaaS YouTube Black Market Database Hiring/Firing Humor Remote Workers Augmented Reality Network Congestion Fraud Document Management Processor eWaste Solid State Drive Wireless Technology Remote Worker Downtime How to Hard Drive Cryptocurrency Business Intelligence Data storage Worker Automobile Audit Wearable Technology IT Management Retail Comparison Hard Drives Computing Instant Messaging CES Robot Excel Computing Infrastructure Botnet Virus IT Plan Going Green Biometrics Content Management Virtual Desktop Business Technology Unified Threat Management Printers IBM Dark mode Millennials Techology Trend Micro Laptop SMS Managing Stress Customers Default App Flash Smart Office Wireless Charging Smart Technology Audiobook Procedure Science Saving Time Google Search Virtual Private Network Cameras Software Tips Supercomputer dark theme Workforce Shopping Touchpad AI IT Infrastructure Sync Emails Cables Customer Relationship Management Politics FinTech Advertising Bing Distributed Denial of Service Project Management Nanotechnology Telecommuting Analyitcs Social Network Investment Notifications Netflix Cortana Two Factor Authentication Programming Digital Signature Employees Employee/Employer Relationships Root Cause Analysis ISP Warranty Printer Server HBO Knowledge Windows 365 Music Video Conferencing Relocation ROI Skype HVAC Antivirus Google Apps Data loss Analysis Sales Windows 8 Bitcoin Shortcuts Cryptomining Administrator Outlook Devices Leadership IT service Point of Sale Troubleshooting Video Games Personal Worker Commute Supply Chain Management Start Menu Enterprise Content Management Screen Mirroring Accountants Loyalty Experience Monitoring Tablet Batteries MSP Microchip Frequently Asked Questions Thought Leadership Domains Windows 8.1 Credit Cards Books Scalability Digitize Business Owner Windows Server 2008 R2 Mobile Password Management Windows 10s Password Manager Cast IaaS Maintenance Customer relationships Multi-Factor Security NarrowBand Manufacturing Search Engine Tip of the week Twitter webinar Email Best Practices Emergency Bloatware Search IT Assessment Employer Employee Relationship iPhone Professional Services NIST Public Cloud Business Mangement Smart Tech Assessment Computer Tips Trending Tablets Managed IT Service Consultant Security Cameras Biometric Security Analytics Windows Server 2008 Addiction Virtual CIO Amazon Entrepreneur OneDrive Peripheral Files Tools Recycling Wiring Practices Television Shortcut Digital Security Cameras Using Data Best Available Chromecast WIndows 7 5G Cache Amazon Web Services Cost Management Copiers Criminal Social Networking Quick Tip Colocation Uninterrupted Power Supply Safe Mode GDPR Hosted Computing Public Computer Ergonomics Smartwatch Monitor OLED Regulations Wireless Internet Online Shopping Transportation Development Rootkit PCI DSS Virtual Machine File Sharing Computer Fan Running Cable Camera Inventory 2FA Specifications Memory Fiber Optics Employee User Reputation Cabling PowerPoint Streaming Media Wire Windows Media Player Workers Evernote Benefits Messaging Content Policy Travel Hypervisor Tech Support FENG

      Top Blog

      The reasoning for this is simple: you want to make sure that operations are proceeding as intended, even if you’re not there. If you completely check out from the workplace every time you leave, you could return from your vacation to a complete and total disaster that may have been prevented with y...
      QR-Code