Have gotten a blackmail email with a password of mine - what to do? [duplicate]

Question

I've gotten the following email today (the password has been changed; and the Greek characters are reproduced verbatim):

Your ρasswοrd is REPLACED. Ι kηow α lot more τhngs about you τhaη τhαt.

How?

I ρlaced α malwαre on τhe ροrn websιte αηd guess whαt, yοu visιτed this web sιte to hαve fun (you kηow whaτ I meαη). Whιle yοu were wατchιng the video, yοur web brοwser αcτed as aη RDP (Remoτe Desκτoρ) aηd α κeylogger, whιch ρrοιded me αccess το yοur dιsplαy screen and webcαm. Righτ αfter τhατ, my sofτware gathered αll your conταcτs frοm your Messenger, Fαcebooκ αccouητ, αnd emaιl αccοuηt.

Whατ exαctly did I dο?

I made a sρlιτ-screeη νideo. The fιrsτ ρarτ recοrded τhe vιdeο you were νiewing (yοu'e goτ aη excepτιoηal τasτe hαha), aηd the next pαrt recorded yοur webcam (Yep! τ's you \doing ηαsty τhιngs!).

Whaτ shοuld you dο?

Well, I belιeve, $2000 ιs a fair prιce fοr οur little secret. You'll mακe τhe ρayment vιa βiτcoιη το the below αddress (if yοu doη't kηοw τhιs, seαrch "hοw to buy βιτcoιn" in Gοogle).

Βιτcοiη Address:

bc1qsqhjhalkn5e9m06vvph7mtml8ryuvzxcgdrhqy (Iτ is cAsE sensitινe, so copy aηd ραste ιτ)

Imροrταnt:

You haνe 24 hοurs τo make τhe pαymeηt. (Ι haνe a unιque pιxel withιn this email message, αnd rιght now Ι κnοw τhat you have read thιs emaιl). If I dοn'τ geτ the ραymeητ, I will seηd your νιdeo το αll οf your cοntacτs, ιncludιηg relατiνes, coworkers, and sο fοrth.Nοneτheless, if I do geτ ρaid, I will erase τhe νideo ιmmedιαtely. Ιf you waητ evidence, reply with "Yes!" aηd Ι wιll send your videο recordιng tο your fiνe frιends. Thιs ιs a ηοη-negotιαble οffer, so doη't wαste my τιme aηd yοurs by reρlyιηg το thιs emαιl.

Millicent Brillinger

Now, I wasn't watching porn online, nor do I have a webcam connected to my computer; nor are my email contacts available online (that I know of), but that password is a weak one I am using on quite a few websites. Also, some careless mailing list servers occasionally send that password to me as plaintext every once-in-a-while.

I'll mention the email comes from some outlook.com address; and my email was migrated to MS Outlook 365 a couple of years back.

My question: What - if anything - would you suggest I do, both to defend myself from the person behind me and to possibly warn/protects others above/from him?

Answer 1

Ignore the email.

Change all your accounts that use that password.

Move on.

Answer 2

Things suggested to me so far:

• (Obvious, but must be said) Go change those passwords!
• Don't answer the email and don't pay anybody anything.
• Search for my address at Have-I-been-Pwned; if you find it, your password has been leaked, regardless of this particular person, and is essentially public now. He's just lame.
• Figure out the abuse reporting address for your mail provider (for Outlook365, it's abuse at outlook dot com) and report the incident there.

---

In my case, "Have I been pwned" says:

Oh no — pwned!

Pwned on 6 breached sites and found no pastes

Three of the breeches only contain email addresses, not passwords. The other three are:

• Collection #1 (unverified)
• Linkedlin
• Onliner Spamerbot

Answer 3

This is a blackmail scheme that has been used for a while now. The text is very similar each time. They often include well known porn sites, which they claim you have visited. In many cases they just randomly guess right, which gives their claim more credit.

You personally cannot do much against such a widespread attack. You haven't been hand picked for this blackmail attempt, but are just a name on a list. You got on that list, because your password was leaked somewhere else and now they use this password to support their claim that they have actually hacked your system.

Change this password on all services which you are using it on and delete the mail. Case closed.

And if you used this password on more than one service, take this as a lesson and start using different passwords for all sites and services that you have an account on. A password manager can help you keep track of those passwords and make your life much easier and more secure.