(I made a throwaway to ask this question, since this situation is pretty embarrassing)
Earlier today I started receiving emails threatening to send embarrassing video of me to all my contacts unless I pay a ransom. When I first saw this message I did briefly panic and consider paying the ransom, but on reflection I'm wondering if this is a plausible threat. I mean, the password they sent as evidence is real, and to my embarrassment I did visit a porn site a week ago because I was bored.
That said, the claimed attack vector seems unlikely to me, and they could have gotten the password from a data breach on an unsecure website (it's a password I use on various forums, not banks or anything). I'm aware of the possibility of keylogging and your webcam being hijacked by a virus, but they're claiming to have done that simply because I visited their website. Is that really possible?
If this is a new attack vector, it seems pretty serious. All an attacker needs is for me to visit a malicious website, not even download anything?
Here is the full email I received:
I know REDACTED is your passphrase. Lets get right to point. You don't know me and you are probably thinking why you are getting this e mail? None has compensated me to check about you.
Well, I actually installed a malware on the xxx streaming (porn) site and guess what, you visited this web site to have fun (you know what I mean). When you were viewing videos, your web browser started out operating as a Remote control Desktop having a keylogger which gave me accessibility to your display and also webcam. Right after that, my software gathered your complete contacts from your Messenger, Facebook, and e-mail account. After that I made a video. 1st part displays the video you were watching (you've got a good taste : )), and next part displays the recording of your cam, yeah it is u.
You have got two different choices. We are going to read up on these possibilities in aspects:
First solution is to skip this message. In this instance, I am going to send out your video to each one of your contacts and then just think concerning the shame that you receive. And as a consequence if you happen to be in a loving relationship, exactly how it will affect?
2nd choice should be to give me $3000. Lets refer to it as a donation. Subsequently, I will straight away erase your video. You will resume your daily routine like this never took place and you would never hear back again from me.
You will make the payment by Bitcoin (if you don't know this, search "how to buy bitcoin" in Google).
BTC Address: 16u9dNXj1WRTu4aEiXREXjD1afqjELXs1S [case-sensitive, copy & paste it]
Should you are wondering about going to the law, okay, this e mail cannot be traced back to me. I have covered my actions. I am also not attempting to demand so much, I wish to be compensated.
You now have one day in order to make the payment. I have a specific pixel in this mail, and now I know that you have read through this e mail. If I don't receive the BitCoins, I will definately send your video to all of your contacts including relatives, colleagues, and so on. However, if I do get paid, I will erase the recording immediately. If you need evidence, reply Yes! then I will send out your video to your 5 friends. This is the non-negotiable offer and thus please do not waste my personal time & yours by responding to this e mail.