"Your Email Has Been Hacked" Bitcoin Scam Email

I received this email overnight. It was sent via my personal email and correctly shows the password.

https://files.ozbargain.com.au/upload/455279/108613/alarm.jp…

I am really stressed. Please help me what to do here and how to get rid of Trojan installed.

Comments

  • +37

    Your e-mail has not been hacked. Your password for a website (and I assume you use the same password for everything) has leaked. Put your e-mail address into Have I Been Pwned and see what websites come up. And change your e-mail password

    • +11

      This.
      You've most likely used the same password for everything, and one of those sites have been compromised.
      They just send out generic emails like this using those compromised details hoping to scam people.
      Change your email password and try to use unique passwords from now on.
      Invest in a password manager to manage and generate unique passwords for all your accounts such as Bitwarden, Lastpass, 1Password, Dashlane, etc…

      Good luck.

    • OP you can check the Bitcoin chain and see all the potential losses end up in the trap. :)

  • +8

    Is there anything you have been doing with the computer you wouldn’t want your mum knowing about?

    Just joking. This is a scam, using an email captured from a past security breach.
    Please change your password, and don’t use the same password on different sites.

  • +6

    "I'm hacked you"
    .

  • +6

    2031

    I love that Delorean movie.

    • +1

      Hackers getting sophisticated, can get us from the future

  • "All your faps are belong to us!"

    Srsly though dude, just ignore it, we've all had that one before. Change your email PW as others have suggested and get on with life. :)

  • Yeah, I got one of those a few years back. Had me really nervous for a few minutes while I googled it.

    • +2

      You mean a few years forward?

    • Yeah i've had similar, but if you look at the info Outlook File > info > Properties you will notice the email is sent from an address / server in the EU.
      So no need to change any passwords. Though check to make sure your details haven't been leaked to the dark web as previously suggested. If they have then I would change your password.
      But these so called hackers use publicly available email addresses so don't list your direct email on any websites.
      Its harder when some mailinglists also publish emails get a good spam filter would be my recommendation.

  • +3

    how to get rid of Trojan installed.

    For that I'll need $500…

  • +4

    Why so nervous?!? WHAT have you been doing in front of your computer ;)

    But seriously, as above, go to: https://haveibeenpwned.com/ and enter your email address, it will show where the password has leaked from!!

    First step is to make sure your email password is unique (you don't use the same password on any other websites) …

    From there, start changing your password on every website / service that you have used those leaked passwords (and if you use the same password, or a small set of passwords, for everything, consider using a "Password Manager" instead - they will ensure passwords are unique - I would suggest BitWarden)

  • +1

    I get this email literally daily bro. But some things to keep in mind:

    • this password/email pair has been hacked in the past from some website where you've used the same email/password. it is then sold online and they mass send out these emails to scare you into paying them.
    • Usually the password is an old one from a website in the past, because it came from some hack many years ago. IF you are afraird they have your email password this means you are probably sharing your email password between different websites AND not changing them regularly. DO NOT DO THIS
    • For the email itself, you can ignore it, BUT as others said, check your email on haveibeenpwned AND I'd also start using a password manager with a unique password for your email, bank and manager not used anywhere else. And wherever you are using this password change it, espeically email/bank/government/socialmedia sites.
  • Lastly, I strongly advise you to avoid similar situations in the future. It is wise to change all your passwords regularly to enhance your online security.

    Wow, so considerate at the end. What a nice fellow. They really are providing a security service for $500 USD if you think about it. 😂

  • whats the password? ill log in and change it for you

  • @ShamRaz You got a good deal for only $500 USD. They wanted $1500 USD from me.

    No but seriously it's a scam, there is no trojan and they don't have access to your photos, browsing history, microphone and so on.

    1. Change your passwords and use a password manager.
    2. Check all of your account security settings and setup Multi-Factor Authentication.
    3. Setup an authenticator app for your email account at the bare minimum. Don't use SMS for Multi-Factor Authentication on your email account.
    4. Setup Passkeys or purchase a minimum of two Yubico Yubikey security keys.
    5. Setup email account recovery methods.
    6. Only use SMS for Multi-Factor Authentication when it's your only option.

    More information on how to Protect Yourself: Multi-Factor Authentication.

  • -4

    a good (poor) password advise is to have a standard password, My password is Werdpess!1 so for Ozbargain my password is Werdpess!1Ozb, try it, it works for me

    • +3

      c'mon man OP is obviously tech illiterate, don't give them dangerously bad advice even as a joke.

  • I got the same address…
    Said something similar that it caught me enjoying myself… just figured spam and if they want that video… we’ll I feel sorry for them… wouldn’t be that exciting…
    Anyways ignored checked that website… gave me a very very old password… almost didn’t check out.
    But will check my passwords moving on

  • +5

    I got one stating they caught me wacking off at my computer and would release the video if I didn't send them some Bitcoin… So I just sent them a letter stating that if they released the videos that it would be a copyright infringement due to me already uploading it to my OnlyFans account.

  • As soon as your email gets discovered by a data breach you will get the standard template emailed to you sometimes multiple times a day.
    The standard template will contain one or more of the following
    "I hacked your webcam"
    "Your browser has a zero day vulnerability which I exploited"
    "I installed a Trojan"
    "Id like some bitcoin of 'random amount' because of 'threat goes here'" These can include "I have a video of you" "I have a video of your partner" "I have a back up of your business dealings"
    "To show I am legit I sent this email from your own account."
    They never contain any details of the device/s because it never happened just keyword threats. To cause people such as yourself a panic. Ahh what do I do? Pay yes pay they have no way of knowing if it was you that paid anyway. The same so called hackers can send out 10's 100's or even 1000's of these at any given time.

    So what can you do? If you reuse passwords over and over then don't. Also adding a random number to a password like 'Ihatebananas1' and then using 'Ihatebananas9' for another site isn't safe.
    Use a password manager most web browsers have included ones. Sync to your phone/tablet/other devices if required.
    Then delete any more emails like this one that you get in the future.

  • Thanks everyone - I have changed the password.

    The activity shows the access from all across the world.

  • Make sure you enable 2-factor too, mate, if your provider supports it. If they don't, consider switching to one that does.

Login or Join to leave a comment