sexual blackmail phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 08:03:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWdpr-000Nkt-7o
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 07:14:19 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 07:14:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip2504e627.dynamic.kabel-deutschland.de ([37.4.230.39]:24725)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWYVh-0009Wz-UM
for doctor@nk.ca;
Fri, 09 Sep 2022 01:33:22 -0600
Message-ID: <0AB07C99EFC6550AB07C99EFC6550AB0@LI07UIK>
From:
To:
Subject: =?UTF-8?B?RG8gWW91IERvIEFueSBvZiBUaGVzZSBFbWJhcnJhc3NpbmcgVGhpbmdzPw==?=
Date: 9 Sep 2022 10:05:22 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0036_01D8C42F.0634822A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 15.4.3508.1109
X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3508.1109
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am sorry to inform you but your device was hacked. That's
what happened. I have used a Zero Click vulnerability with a special code
to hack your device through a website. A complicated software that requires
precise skills that I posess. This exploit [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[37.4.230.39 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=doctor%40nk.ca;ip=37.4.230.39;r=doctor.nl2k.ab.ca]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2
0.5 PDS_BTC_ID FP reduced Bitcoin ID
0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) + direct-to-MX
0.0 BITCOIN_XPRIO Bitcoin + priority
1.0 BITCOIN_SPAM_07 BitCoin spam pattern 07
0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} =?UTF-8?B?RG8gWW91IERvIEFueSBvZiBUaGVzZSBFbWJhcnJhc3NpbmcgVGhpbmdzPw==?=
This is a multi-part message in MIME format.
------=_NextPart_000_0036_01D8C42F.0634822A
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I am sorry to inform you but your device was hacked.
That's what happened. I have used a Zero Click vulnerability with a =
special code to hack your device through a website.
A complicated software that requires precise skills that I posess.
This exploit works in a chain with a specially crafted unique code and =
such type of an attack goes undetected.
You only had to visit a website to be infected, and unfortunately for =
you it's that simple for me.
You were not targeted, but just became one of the many unlucky people =
who got hacked through that webpage.
All of this happened in August. So I’ve had enough time to collect =
the information.
I think you already know what is going to happen next.
For a couple of month my software was quietly collecting information =
about your habits, websites you visit, websearches, texts you send.
There is more to it, but I have listed just a few reasons for you to =
understand how serious this is.
To be clear, my software controlled your camera and microphone as well.
It was just about right timing to get you privacy violated. I have made =
a few pornhub worthy videos with you as a lead actor.
I’ve been waiting enough and have decided that it’s time to =
put an end to this.
Here is my offer. Let’s name this a “consulting fee” I =
need to get, so I can delete the media content I have been collecting.
Your privacy stays untouched, if I get the payment.
Otherwise, I will leak the most damaging content to your contacts and =
post it to a public website for perverts to view.
You and I understand how damaging this will be to you, it's not that =
much money to keep your privacy.
I don’t care about you personally, that's why you can be sure that =
all files I have and software on your device will be deleted immediately =
after I receive the transfer.
I only care about getting paid.
My modest consulting fee is 1700 US Dollars to be transferred in =
Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: =
18YFLJHGufQQukMFRkJJJiz51mp21qN96p
The fee is non negotiable, to be transferred within 2 business days.
Obviously do not try to ask for help from the law enforcement unless you =
want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of =
the agreement, you wont hear from me ever again.
Take care and have a good day.
------=_NextPart_000_0036_01D8C42F.0634822A
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_000_0036_01D8C42F.0634822A--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 09 Sep 2022 08:03:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWdpr-000Nkt-7o
for dave@doctor.nl2k.ab.ca;
Fri, 09 Sep 2022 07:14:19 -0600
Resent-From: The Doctor
Resent-Date: Fri, 9 Sep 2022 07:14:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ip2504e627.dynamic.kabel-deutschland.de ([37.4.230.39]:24725)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWYVh-0009Wz-UM
for doctor@nk.ca;
Fri, 09 Sep 2022 01:33:22 -0600
Message-ID: <0AB07C99EFC6550AB07C99EFC6550AB0@LI07UIK>
From:
To:
Subject: =?UTF-8?B?RG8gWW91IERvIEFueSBvZiBUaGVzZSBFbWJhcnJhc3NpbmcgVGhpbmdzPw==?=
Date: 9 Sep 2022 10:05:22 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0036_01D8C42F.0634822A"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 15.4.3508.1109
X-MimeOLE: Produced By Microsoft MimeOLE V15.4.3508.1109
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am sorry to inform you but your device was hacked. That's
what happened. I have used a Zero Click vulnerability with a special code
to hack your device through a website. A complicated software that requires
precise skills that I posess. This exploit [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[37.4.230.39 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=doctor%40nk.ca;ip=37.4.230.39;r=doctor.nl2k.ab.ca]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2
0.5 PDS_BTC_ID FP reduced Bitcoin ID
0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) + direct-to-MX
0.0 BITCOIN_XPRIO Bitcoin + priority
1.0 BITCOIN_SPAM_07 BitCoin spam pattern 07
0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} =?UTF-8?B?RG8gWW91IERvIEFueSBvZiBUaGVzZSBFbWJhcnJhc3NpbmcgVGhpbmdzPw==?=
This is a multi-part message in MIME format.
------=_NextPart_000_0036_01D8C42F.0634822A
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I am sorry to inform you but your device was hacked.
That's what happened. I have used a Zero Click vulnerability with a =
special code to hack your device through a website.
A complicated software that requires precise skills that I posess.
This exploit works in a chain with a specially crafted unique code and =
such type of an attack goes undetected.
You only had to visit a website to be infected, and unfortunately for =
you it's that simple for me.
You were not targeted, but just became one of the many unlucky people =
who got hacked through that webpage.
All of this happened in August. So I’ve had enough time to collect =
the information.
I think you already know what is going to happen next.
For a couple of month my software was quietly collecting information =
about your habits, websites you visit, websearches, texts you send.
There is more to it, but I have listed just a few reasons for you to =
understand how serious this is.
To be clear, my software controlled your camera and microphone as well.
It was just about right timing to get you privacy violated. I have made =
a few pornhub worthy videos with you as a lead actor.
I’ve been waiting enough and have decided that it’s time to =
put an end to this.
Here is my offer. Let’s name this a “consulting fee” I =
need to get, so I can delete the media content I have been collecting.
Your privacy stays untouched, if I get the payment.
Otherwise, I will leak the most damaging content to your contacts and =
post it to a public website for perverts to view.
You and I understand how damaging this will be to you, it's not that =
much money to keep your privacy.
I don’t care about you personally, that's why you can be sure that =
all files I have and software on your device will be deleted immediately =
after I receive the transfer.
I only care about getting paid.
My modest consulting fee is 1700 US Dollars to be transferred in =
Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: =
18YFLJHGufQQukMFRkJJJiz51mp21qN96p
The fee is non negotiable, to be transferred within 2 business days.
Obviously do not try to ask for help from the law enforcement unless you =
want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of =
the agreement, you wont hear from me ever again.
Take care and have a good day.
------=_NextPart_000_0036_01D8C42F.0634822A
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
I am sorry to inform you but your device was hacked.
That's what happened. I have used a Zero Click vulnerability with a =
special code to hack your device through a website.
A complicated software that requires precise skills that I posess.
This exploit works in a chain with a specially crafted unique code and =
such type of an attack goes undetected.
You only had to visit a website to be infected, and unfortunately for =
you it's that simple for me.
You were not targeted, but just became one of the many unlucky people =
who got hacked through that webpage.
All of this happened in August. So I’ve had enough time to collect =
the information.
I think you already know what is going to happen next.
For a couple of month my software was quietly collecting information =
about your habits, websites you visit, websearches, texts you send.
There is more to it, but I have listed just a few reasons for you to =
understand how serious this is.
To be clear, my software controlled your camera and microphone as =
well.
It was just about right timing to get you privacy violated. I have made =
a few pornhub worthy videos with you as a lead actor.
I’ve been waiting enough and have decided that it’s time to =
put an end to this.
Here is my offer. Let’s name this a “consulting fee” I =
need to get, so I can delete the media content I have been =
collecting.
Your privacy stays untouched, if I get the payment.
Otherwise, I will leak the most damaging content to your contacts and =
post it to a public website for perverts to view.
You and I understand how damaging this will be to you, it's not that =
much money to keep your privacy.
I don’t care about you personally, that's why you can be sure that =
all files I have and software on your device will be deleted immediately =
after I receive the transfer.
I only care about getting paid.
My modest consulting fee is 1700 US Dollars to be transferred in =
Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: =
18YFLJHGufQQukMFRkJJJiz51mp21qN96p
The fee is non negotiable, to be transferred within 2 business =
days.
Obviously do not try to ask for help from the law enforcement unless you =
want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of =
the agreement, you wont hear from me ever again.
Take care and have a good day.
That's what happened. I have used a Zero Click vulnerability with a =
special code to hack your device through a website.
A complicated software that requires precise skills that I posess.
This exploit works in a chain with a specially crafted unique code and =
such type of an attack goes undetected.
You only had to visit a website to be infected, and unfortunately for =
you it's that simple for me.
You were not targeted, but just became one of the many unlucky people =
who got hacked through that webpage.
All of this happened in August. So I’ve had enough time to collect =
the information.
I think you already know what is going to happen next.
For a couple of month my software was quietly collecting information =
about your habits, websites you visit, websearches, texts you send.
There is more to it, but I have listed just a few reasons for you to =
understand how serious this is.
To be clear, my software controlled your camera and microphone as =
well.
It was just about right timing to get you privacy violated. I have made =
a few pornhub worthy videos with you as a lead actor.
I’ve been waiting enough and have decided that it’s time to =
put an end to this.
Here is my offer. Let’s name this a “consulting fee” I =
need to get, so I can delete the media content I have been =
collecting.
Your privacy stays untouched, if I get the payment.
Otherwise, I will leak the most damaging content to your contacts and =
post it to a public website for perverts to view.
You and I understand how damaging this will be to you, it's not that =
much money to keep your privacy.
I don’t care about you personally, that's why you can be sure that =
all files I have and software on your device will be deleted immediately =
after I receive the transfer.
I only care about getting paid.
My modest consulting fee is 1700 US Dollars to be transferred in =
Bitcoin. Exchange rate at the time of the transfer.
You need to send that amount to this wallet: =
18YFLJHGufQQukMFRkJJJiz51mp21qN96p
The fee is non negotiable, to be transferred within 2 business =
days.
Obviously do not try to ask for help from the law enforcement unless you =
want your privacy to be violated.
I will monitor your every move until I get paid. If you keep your end of =
the agreement, you wont hear from me ever again.
Take care and have a good day.
------=_NextPart_000_0036_01D8C42F.0634822A--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments