X Ideos.Com
⚡ ALL INFORMATION CLICK HERE 👈🏻👈🏻👈🏻
X Ideos.Com
Home News Security Sextortion Scam Stating Xvideos Was Hacked to Record You Through Webcam
Bitcoin Payments to 18z5c6TjLUosqPTEnm6q7Q2EVNgbCy16Td
Lawrence Abrams
Lawrence Abrams is the owner and Editor in Chief of BleepingComputer.com. Lawrence's area of expertise includes Windows, malware removal, and computer forensics. Lawrence Abrams is a co-author of the Winternals Defragmentation, Recovery, and Administration Field Guide and the technical editor for Rootkits for Dummies.
Useful Resources
Welcome Guide
Sitemap
Free decryptor released for AstraLocker, Yashma ransomware victims
New stealthy OrBit malware steals data from Linux devices
Massive Rogers outage disrupts mobile service, payments in Canada
Quantum ransomware attack affects 657 healthcare orgs
The Week in Ransomware - July 8th 2022 - One down, many to go
New 0mega ransomware targets businesses in double-extortion attacks
CEO charged with sale of counterfeit Cisco devices to govt, health orgs
Microsoft fixes bug crashing Office apps when opening cloud documents
How to remove the PBlock+ adware browser extension
Remove the Toksearches.xyz Search Redirect
Remove the Smashapps.net Search Redirect
Remove the Smashappsearch.com Search Redirect
Remove Security Tool and SecurityTool (Uninstall Guide)
How to remove Antivirus 2009 (Uninstall Instructions)
How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo
How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller
Locky Ransomware Information, Help Guide, and FAQ
CryptoLocker Ransomware Information Guide and FAQ
CryptorBit and HowDecrypt Information Guide and FAQ
CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ
How to open a Windows 11 Command Prompt as Administrator
How to make the Start menu full screen in Windows 10
How to install the Microsoft Visual C++ 2015 Runtime
How to open an elevated PowerShell Admin prompt in Windows 10
How to remove a Trojan, Virus, Worm, or other Malware
How to show hidden files in Windows 7
A sextortion scam variant is going around that states the popular adult site called Xvideos.com was hacked to include malicious script that records a visitor through their webcam and sends it to the hacker. The scam emails also states that this script was able to connect back to the visitors computer to steal their data and contacts.
This variant of the sextortion scam has been under way for about a month now, but we first learned about last night when a reader contacted us to see if it was real. Like previous variants, this scam email includes a user's old password obtained from data breaches and threatens to send videos of the recipients in compromising activities unless they send the attackers a bitcoin payment of $969.
This is, though, the first time we have seen one using the hacked adult site angle and it seems to be working as the user was concerned it may be real.
The full text of this sextortion can be read below:
The bitcoin address included in this email, 18z5c6TjLUosqPTEnm6q7Q2EVNgbCy16Td , has been reported being used in sextortion scams starting in early January 2019. At this time it has received 11 transactions for approximately .95 bitcoins. This equates to $3,260.52.
As these scams have been extremely profitable, with attackers earning as much as $50k in a week with little or not cost to spam them out, we should not expect to see them stop any time soon.
While these emails may appear real and scary enough to make you want to send a payment, it is important that recipients understand that this is a scam and you should just delete these emails if you receive them. Even worse, some of these sextortion scams include links or attachments to supposed samples of videos they made of you.
Do not open these attachments as they have installed other malware such as the GandCrab Ransomware and information stealing Trojans in the past.
If at any time you are in doubt, feel free to reach out to us here with a sample and we will take a look and confirm if it's something that you should be worried about.
I received the following e-mail yesterday. It is different in that it has no reference to a password, but they claim has been sent from an organisation of which I am a member, If I click reply that organsation's address goes into the send to line. Is this more serious than the password version? I am in the uk.
You may not know me and you are probably wondering why you are getting this e mail, right?
I’m a hacker who cracked your email and devices a few months ago.
Do not try to contact me or find me, it is impossible, since I sent you an email from YOUR hacked account.
I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean).
While you were watching videos, your internet browser started out functioning as a RDP (Remote Control) having a keylogger which gave me accessibility to your screen and web cam.
After that, my software program obtained all information.
You entered a passwords on the websites you visited, and I intercepted it.
Of course you can will change it, or already changed it.
But it doesn’t matter, my malware updated it every time.
What did I do?
I backuped device. All files and contacts.
I created a double-screen video. 1st part shows the video you were watching (you’ve got a good taste haha . . .), and 2nd part shows the recording of your web cam.
exactly what should you do?
Well, in my opinion, $1000 (USD) is a fair price for our little secret. You’ll make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).
My Bitcoin wallet Address:
17QP874GxFsaWxJpP2dfP785i1JLemr8Au
(It is cAsE sensitive, so copy and paste it)
Important:
You have 48 hour in order to make the payment. (I’ve a unique pixel in this e mail, and at this moment I know that you have read through this email message).
To track the reading of a message and the actions in it, I use the facebook pixel.
Thanks to them. (Everything that is used for the authorities can help us.) If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on.
Just rec'd 2 of the following emails in the last couple days. They appear to come from my email address. Not sure how the supposed video would have been obtained since I don't have a camera. Anyone else getting these?
"You may not know me and you are probably wondering why you are getting this e mail, right?
I’m a hacker who cracked your email and devices a few months ago.
Do not try to contact me or find me, it is impossible, since I sent you an email from YOUR hacked account.
I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean).
While you were watching videos, your internet browser started out functioning as a RDP (Remote Control) having a keylogger which gave me accessibility to your screen and web cam.
After that, my software program obtained all information.
You entered a passwords on the websites you visited, and I intercepted it.
Of course you can will change it, or already changed it.
But it doesn’t matter, my malware updated it every time.
What did I do?
I backuped device. All files and contacts.
I created a double-screen video. 1st part shows the video you were watching (you’ve got a good taste haha . . .), and 2nd part shows the recording of your web cam.
exactly what should you do?
Well, in my opinion, $1000 (USD) is a fair price for our little secret. You’ll make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).
My Bitcoin wallet Address:
16i7q6dQ9hxcuT8ZxVA9JYUETcPA3VbBb5
(It is cAsE sensitive, so copy and paste it)
Important:
You have 48 hour in order to make the payment. (I’ve a unique pixel in this e mail, and at this moment I know that you have read through this email message).
To track the reading of a message and the actions in it, I use the facebook pixel.
Thanks to them. (Everything that is used for the authorities can help us.) If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on."
I received one of those last week or the week before, same format, it had an old password, this one asked for USD 700. I check my spam folder almost daily to verify that anything sent to spam is spam and not a valid email, and if something looks interesting I view the raw header to see the message without actually opening the email. I just deleted it along with the rest of the emails in that folder.
I just received this at my work email: I am aware ***** one of your passphrases. Lets get directly to point. Not one person has paid me to investigate about you. You do not know me and you're most likely thinking why you are getting this e-mail?
in fact, i actually placed a malware on the 18+ vids (sex sites) web site and you know what, you visited this web site to experience fun (you know what i mean). While you were viewing video clips, your internet browser began operating as a Remote Desktop having a key logger which provided me with accessibility to your display and web cam. after that, my software program obtained every one of your contacts from your Messenger, Facebook, as well as e-mailaccount. and then i made a double video. 1st part shows the video you were viewing (you've got a fine taste haha), and next part displays the view of your webcam, & its u.
You got just two choices. We should understand these types of choices in aspects:
1st solution is to ignore this e mail. in this instance, i am going to send your very own video clip to every single one of your personal contacts and then just imagine regarding the disgrace you feel. and as a consequence if you are in a committed relationship, precisely how it would affect?
Number two option will be to give me $987. We are going to describe it as a donation. Then, i will instantly remove your videotape. You will continue on with your way of life like this never happened and you surely will never hear back again from me.
You will make the payment through Bitcoin (if you do not know this, search 'how to buy bitcoin' in Google search engine).
BTC address to send to: 1NkeTCQdZThJtdepfnBH6CaMF4Cw47oZy5
[CaSe SeNSiTiVe copy and paste it]
if you are looking at going to the police, okay, this e-mail cannot be traced back to me. I have taken care of my moves. i am also not trying to ask you for money a lot, i would like to be paid for. i have a special pixel within this message, and at this moment i know that you have read this e mail. You now have one day to pay. if i don't get the BitCoins, i definitely will send your video recording to all of your contacts including close relatives, colleagues, etc. However, if i receive the payment, i will destroy the video right away. it is a non-negotiable offer thus don't waste my personal time and yours by responding to this mail. if you really want evidence, reply Yup! and i definitely will send your video recording to your 7 friends.
To add to the above email, over the past several weeks numerous customers that I interact with via email at work have been receiving bogus emails from me that requests payment. The emails they receive have my name but the email address is not my email address. Not sure if this is related to the spam email above or not.
I recievef such e.mail today to.
Can anyone tell me if the mail is real ? Can any one hack my camera on my phone ? And also, a question to users who have recieved such mails, did they really outed you after the dead line was over ? I am worried.
No these are all fake. Just trash them.
No, nothing happened, if I didn't check my spam emails I wouldn't have even seen it. The scammer is using fear to trick their victim into sending money to them. I don't have a camera, and what harm would actually come from somebody finding out you visited an adult site? They will stay hidden and steal things like credit card/banking information without the victim knowing about it. Scams like this one use fear to prey on the person receiving their threatening email. I would say don't worry, I did change my password to this site, shortly after I got the email, I got a friend request from a banned user Sexy_Girl
Thanks for your replies. This is the mail I recieved:
I know ...............one of your passphrases. Lets get straight to the purpose. No person has compensated me to investigate you. You do not know me and you're most likely wondering why you are getting this e mail?
Well, i setup a malware on the 18+ video clips (pornography) site and there's more, you visited this web site to have fun (you know what i mean). While you were watching video clips, your internet browser started out operating as a RDP having a keylogger which provided me with access to your screen and also webcam. after that, my software program collected your complete contacts from your Messenger, Facebook, and emailaccount. Next i created a double video. 1st part shows the video you were viewing (you've got a good taste haha . . .), and 2nd part shows the recording of your webcam, & its u.
You get 2 options. Lets take a look at each of these possibilities in aspects:
Very first option is to skip this e-mail. as a consequence, i am going to send out your very own video recording to every single one of your contacts and also visualize r egarding the shame you experience. and definitely in case you are in an affair, how it is going to affect?
Second choice would be to pay me USD 978. We are going to think of it as a donation. in this scenario, i will instantaneously eliminate your video footage. You will go on daily life like this never happened and you would never hear back again from me.
You'll make the payment by Bitcoin (if you do not know this, search for 'how to buy bitcoin' in Google).
BTC address to send to: 172LqchRYtFrzeMzRH6G9om6uY9mjX6qo5
[CaSe SeNSiTiVe, copy & paste it]
if you may be planning on going to the cops, okay, this e-mail cannot be traced back to me. I have taken care of my actions. i am also not looking to ask you for money a huge amount, i just like to be paid for. You now have 48 hours to pay. i have a specific pixel within this email message, and now i know that you have read through this e-mail. if i do not get the BitCoins, i definitely will send your video to all of your contacts including family members, co-workers, and so forth. However, if i do get paid, i will destroy the recording immediately. if you really want proof, reply with Yes and i will certainly send out your video to your 8 friends. it's a nonnegotiable offer thus don't waste my time & yours by replying to this e mail.
Well the harm that can come from people finding out I visited adult web sites: I am a girl, married and have a family. I wouldn't like my kids friends, teachers, co workers....know my business., its private
Id I visited an adult web sote is via my smart phone. Can the hacker get control of my camera on my smartphone ? I am just really stressed and depressed right now+ worried. Thats why I asked if the hacker really filmed me or if you know people that he actualy outed ?
You're good. It's a scam. Nothing to worry about
I got sent that email yesterday, should I be concerned about it?
Hello! As you may have noticed, I sent last digits your number#xx77 This means that I have full access to your device and accounts. I've been watching you for a few months now. The fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control your device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. Why your antivirus did not detect malware? Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts. If you want to prevent this, transfer the amount of $948 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin"). My bitcoin address is: 18CyRnT8rxjUBCKqjJP55LAY1CdEXc2Nat After receiving the payment, I will delete the video and you will never hear me again. I give you 48 hours to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed.
Vmjd, thanks for sharing the latest variant. I sent you a personal message, which can be retrieved here: https://www.bleepingcomputer.com/forums/index.ph
Arad Winwin
Venus Lux And Kendra Sinclaire
Tran Porno