According to Guardian (Thu 17 Jan 2019), this is a typical “webcam blackmail” or “sextortion scam”. From the depths of internet (darknet) those criminals have mined some old, not so good passwords, used maybe even years ago.
Nothing happened, nothing was hacked, and no spy-/malware found on my devices. Not that I was worried because any of those accusations made on the message. The real concern was the security of all work related stuff and private correspondence between me and other people. In this case the password is probably the same that was compromised somewhat ten years ago, when my Twitter account got hacked.
And if you ever get such email, I recommend ignoring it. The worst thing one could do is to reply. What you can and should do instead:
1) If you indeed still use such endangered old password anywhere, then change it immediately!
2) You can also check if some of your old passwords are listed at
Have I Been Pwned database. But even if you get "green light", change that password anyway.
3) To assure yourself that your computer is not hacked, update your operating system. Install some
Internet Security software, if you do not have one yet. Update that software if you have. Run full inspection on your computer. Some of the software providers give free "online check", like
F-Secure.
4) Although the accusation to become spied via webcam is ridiculous, such spyware still exists. The solution is simple. Put a sticker over your web cam when you are not using it. Microphone is another risk on laptops and mobile devices. There are for example claims that companies like Google secretly spies users via microphone, to provide more targeted services (advertisements). I find that very unlikely, and only as rumor spread by competitors and those who sees conspiracy theories everywhere. But again, technically anything is possible. By keeping your operating system and software up-to-date, you should be on safe side. At least do not say aloud: "My ipernity account password is x.", onto your device microphone ;-)
5) Do not visit any web sites that could endanger your device and privacy! Do not open any links on email, that you are not sure about! Use only trusted sources.
6) Consider reporting blackmail as a crime. There is maybe an online service provided by local/national police to do that. You may wish to mark it as less urgent issue. Such criminals at least can hide their tracks, usually, So, most likely they never get caught. But blackmail is a blackmail, no matter what. At least it is "intimidation" (cowing, illegal threat).
15 comments
Jean-luc Drouin said:
Je confirme que la procédure pour protéger son ordinateur que tu conseilles est la bonne.
Sami Serola (inactiv… replied to Jean-luc Drouin:
Marie-claire Gallet said:
Sami Serola (inactiv… replied to Marie-claire Gallet:
Xata said:
Sami Serola (inactiv… replied to Xata:
Part one and two can be the same for all services. Then 1-3 letters varies according to service.
Xata replied to Sami Serola (inactiv…:
Annemarie said:
thanks for the advise.
Sami Serola (inactiv… replied to Annemarie:
Marta Wojtkowska said:
But I admit, I read them sometimes.
They are so funny :D
Sami Serola (inactiv… replied to Marta Wojtkowska:
youtu.be/_QdPW8JrYzQ
Starting with something like this:
"Do you mind me replying with 3? I am not sure if I have any more friends/contacts?"
Marta Wojtkowska replied to Sami Serola (inactiv…:
Thanks!
Gudrun said:
Wierd Folkersma said:
Sami Serola (inactiv… replied to Wierd Folkersma:
I have to admit I was panicking for no reason, because I did not read that blackmail well enough at first. All I saw is familiar password and malware. I even first thought it was a consequence of using Zoom video meeting software: yle.fi/uutiset/3-11307551
After investigating this more, I even discovered an older similar message in my Google email's spam box. There the same old password was used to blackmail. Only with somewhat different words: "..I've installed a keylogger on ur pc & collected all your contacts on social networks, messenger & emails."
So, Gmail was smart enough to recognize that earlier blackmail as spam, but not the second one.
Meaning that you may also find some interesting messages in your spam inbox ;-)