Loading

Blackmail

According to Guardian (Thu 17 Jan 2019), this is a typical “webcam blackmail” or “sextortion scam”. From the depths of internet (darknet) those criminals have mined some old, not so good passwords, used maybe even years ago.

Nothing happened, nothing was hacked, and no spy-/malware found on my devices. Not that I was worried because any of those accusations made on the message. The real concern was the security of all work related stuff and private correspondence between me and other people. In this case the password is probably the same that was compromised somewhat ten years ago, when my Twitter account got hacked.

And if you ever get such email, I recommend ignoring it. The worst thing one could do is to reply. What you can and should do instead:

1) If you indeed still use such endangered old password anywhere, then change it immediately!

2) You can also check if some of your old passwords are listed at Have I Been Pwned database. But even if you get "green light", change that password anyway.

3) To assure yourself that your computer is not hacked, update your operating system. Install some Internet Security software, if you do not have one yet. Update that software if you have. Run full inspection on your computer. Some of the software providers give free "online check", like F-Secure.

4) Although the accusation to become spied via webcam is ridiculous, such spyware still exists. The solution is simple. Put a sticker over your web cam when you are not using it. Microphone is another risk on laptops and mobile devices. There are for example claims that companies like Google secretly spies users via microphone, to provide more targeted services (advertisements). I find that very unlikely, and only as rumor spread by competitors and those who sees conspiracy theories everywhere. But again, technically anything is possible. By keeping your operating system and software up-to-date, you should be on safe side. At least do not say aloud: "My ipernity account password is x.", onto your device microphone ;-)

5) Do not visit any web sites that could endanger your device and privacy! Do not open any links on email, that you are not sure about! Use only trusted sources.

6) Consider reporting blackmail as a crime. There is maybe an online service provided by local/national police to do that. You may wish to mark it as less urgent issue. Such criminals at least can hide their tracks, usually, So, most likely they never get caught. But blackmail is a blackmail, no matter what. At least it is "intimidation" (cowing, illegal threat).
Visible by: Everyone
(more information)

More information

Visible by: Everyone

Attribution + non Commercial

Report this photo as inappropriate

15 comments

Jean-luc Drouin said:

Il y a un an, des dizaines de milliers de français ont reçu ce type de mail. Plus de 300.000 internautes ont porté plainte sur un site de "signalement d'abus" en ligne. Le pirate n'a jamais été retrouvé ni inquiété, mais l'envoi des mails à cessé. L'affaire a tellement fait de bruit qu'elle a fait la "Une" de l'actualité.
Je confirme que la procédure pour protéger son ordinateur que tu conseilles est la bonne.
4 years ago ( translate )

Sami Serola (inactiv… replied to Jean-luc Drouin:

They rise up their ugly head again during the Covid-19. All kinds of scams are spreading around these days.
4 years ago

Marie-claire Gallet said:

Thank you for your reminder, Sami ****************************************
4 years ago

Sami Serola (inactiv… replied to Marie-claire Gallet:

You are welcome =)
4 years ago ( translate )

Xata said:

not happened to me yet. Passwords are a hell..our hell... but also the gateway for many pleasures and interesting things...
4 years ago

Sami Serola (inactiv… replied to Xata:

The best way is to write it/them on the piece of paper. That makes it possible to come up with long and cryptic enough password. The long part is on the paper. Then the second part of it consist of 4-5 digit number or code that you memorize. And as a third part you have some indicator of the service that the password belongs to.

Part one and two can be the same for all services. Then 1-3 letters varies according to service.
4 years ago

Xata replied to Sami Serola (inactiv…:

I have all data in a small notebook and also encrypted in a system provided by Mac, some even function with fingerprint... but when it does not work like that and I have to search for it... grrrrrr... my menory fails more and more often!
4 years ago

Annemarie said:

ohhhh mei
thanks for the advise.
4 years ago

Sami Serola (inactiv… replied to Annemarie:

You are welcome =)
4 years ago ( translate )

Marta Wojtkowska said:

I get such e-mails every other day. They land directly in the junk folder.
But I admit, I read them sometimes.
They are so funny :D
4 years ago

Sami Serola (inactiv… replied to Marta Wojtkowska:

Well, it could be fun to do something similar as James Veitch:
youtu.be/_QdPW8JrYzQ

Starting with something like this:

"Do you mind me replying with 3? I am not sure if I have any more friends/contacts?"
4 years ago

Marta Wojtkowska replied to Sami Serola (inactiv…:

Laughing tears run down my face when I was watching this :D
Thanks!
4 years ago

Gudrun said:

It's all so obvious and still plenty of people fall for it! Like the phone calls from fake policemen or the fake Microsoft support from an Indian callcenter....I never open mails from unknown senders and always hover my mouse to see the full eMail address.
4 years ago

Wierd Folkersma said:

thank you for the information, to my surprise my passwords are not pawned. For some reason I never get those e-mails, let us hope it will never start. Only via Facebook like the bitcoin stories about Antti Herlin and also of our prime minister.
4 years ago

Sami Serola (inactiv… replied to Wierd Folkersma:

Well, I have been using internet for so long, and in so many ways, that no wonder that some of my "experimenting passwords" have leaked.

I have to admit I was panicking for no reason, because I did not read that blackmail well enough at first. All I saw is familiar password and malware. I even first thought it was a consequence of using Zoom video meeting software: yle.fi/uutiset/3-11307551

After investigating this more, I even discovered an older similar message in my Google email's spam box. There the same old password was used to blackmail. Only with somewhat different words: "..I've installed a keylogger on ur pc & collected all your contacts on social networks, messenger & emails."

So, Gmail was smart enough to recognize that earlier blackmail as spam, but not the second one.

Meaning that you may also find some interesting messages in your spam inbox ;-)
4 years ago