Hacker News Reader

Comment by dhosek | Hacker News Reader

I have to admit I've not seen any evidence of this in any of my e-mail accounts. I check the spam folder for false positives periodically and while I've seen the periodic your password is XXX and we have webcam footage of you (which I can trace to the Perl hackers website password leak), I haven't seen any of the others or, for that matter a significant flow of spam in general. It's certainly a lot better than things were in the '00s or the '90s when I ended up abandoning e-mail addresses after they got flooded with spam.

View on HN

I had one get through my spam filter maybe six months ago. Someone was claiming to have used my webcam to capture me carrying out [actions] while looking at [illegal content] on my computer.

They said they had access to my computer. As proof, they were sending the email from my own account, and sure enough the email had been sent from my account.

Finally, as proof that they weren't messing around, they attached part of the video to the email, which I could download and open and use to verify that they really did have me.

Imagine being someone that uses the internet but doesn't understand email, who had actually done the things they described:

1. Someone sent an email describing your illegal act.

2. They proved they have control of your computer by sending you an email from your account.

3. They sent part of the video. Downloading. Installing. Why's there no video?

I saw a lot of porn blackmail scam emails getting past my filters from between late 2018 to mid 2019. All followed the same pattern: hacked webcam, threatening to send video to all my contacts unless I sent bitcoin, claiming to know when the email was opened. [0]

In my case, it also contained a password I had only ever used for a LiveJournal account I had forgotten about and not logged into for several years by that point.

[0] https://kitsunesoftware.wordpress.com/2018/08/09/anatomy-of-...

I saw a couple of these in my spam folder a while back (sadly more than a month ago, so they're gone). They claimed they hacked me through my router and had compromising videos of me in a couple of fairly similar formats. I chalked it up to the fact that I have my email in a number of fairly public places.

First time I saw one of these, I started laughing. I don't have a webcam. It's hard to believe but people have actually paid the ransom. I seem to remember a post on HN matched some Bitcoin transactions by time and amount.

I don't think it's that hard to believe. I had a very smart lawyer friend call me the other day to ask for help regarding one of these. He said something like "I probably would have disregarded it, but they knew my password. I'd never pay, but it's very disconcerting."

I'm guessing there are many people who've been doing stuff online they'd worry about their friends knowing, who would pay.

Fwiw,I checked haveibeenpwned with him, and we found where they would have got the password from. My spam filter had caught lots of emails with identical wording, so it was reassuring for him to see the same emails, understand how it happened, and learn some password management stuff.

Reply on news.ycombinator.com