Email scam claims that ‘ingram78’ has hacked your mailbox
One of the latest email scams claims that a person nicknamed ingram78 on the darknet has hacked your mailbox more than six months ago.
If you received an email message that says “Hello! My nickname in darknet is ingram78” and further states that they have infected your operating system with a virus and have been monitoring you, ignore it. It’s not true.
The email message might be frightening because it will appear as if it was sent from your own account. The scammers also mention your password (current or previous) throughout the message. However, your email account was not hacked and ingram78 has not been monitoring you.
The email also wants you to pay them in Bitcoin to have your data (that doesn’t exist) deleted. Don’t pay them since it is just a scam. The email claims that if you do not pay them that they will send everyone in your contacts screenshots through the camera of your device of you visiting “intimate content sites.”
Email message campaigns like this have been making circulation following recent leaks on websites like LinkedIn and Adobe. To see where your email information may have been compromised check out https://haveibeenpwned.com/. You can input your email address to locate where your information was leaked.
Here’s what is written in the current email campaign:
Subject: [your email address] is hacked
From [your email address]
To [your password/current or previous]Hello!
My nickname in darknet is ingram78.
I hacked this mailbox more than six months ago,
through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.So, your password from [your email address] is [removed]
Even if you changed the password after that – it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $892 is quite a fair price to destroy the dirt I created.Send the above amount on my BTC wallet (bitcoin): 1EZS92K4xJbymDLwG4F7PNF5idPE62e9XY
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I’ll send to everyone your contact access to your email and access logs, I have carefully saved it!Since reading this letter you have 48 hours!
After your reading this message, I’ll receive an automatic notification that you have seen the letter.I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don’t enter your passwords anywhere!
As you can see, the email can appear legitimate to many people. But, the same message has been sent around the internet to many people (word-for word) and there have been many campaigns like it in the past. Even if you have never visited an intimate website, you will still receive the same message. Even if your device does not have a camera, they will still claim to have recorded you through your camera. There is also a version of this message that uses the name jud83.
Do not pay the $892 BTC and do not reply to the scammers. The only thing you need to do is change the password to your email address and other accounts you have for safe measure.
The email message does not mean that your computer is infected with malware; However, if you would like to remove malware and other potentially malicious files from your computer we recommended to use Malwarebytes. Here are some instructions:
1. Download Malwarebytes Anti-Malware software to scan your computer and remove malicious files and potentially unwanted programs.
2. To install the program, click the file you just downloaded. It can usually be located in the Download folder.
3. A window that says “Welcome to the Malwarebytes Setup Wizard” will appear. Click Agree and Install to begin the installation. Once complete, click Finish.
4. Now the Malwarebytes is installed, open the program and click the Scan Now button – or go to the Scan tab and click the Start Scan button.
3. When the scan is complete click the Quarantine Selected button.
4. If Malwarebytes says “All selected items have been removed successfully. A log file has been saved to the logs folder. Your computer needs to be restarted to complete the removal process. Would you like to restart now?” click the Yes button to restart your computer.
Snap, this one was hiro86. Twats.
I had a Jessey30.
I’ll be honest, it scared the hell out of me and confused me at the same time.
Never had a camera on my PC and my old phone? I wouldn’t know how that would work given it’s age.
Thank you for this article.
So, if it’s all fake how did the hackers get the password?
As explained in the post, they get the passwords during a breach. The information may be sold to them or available online. You can find out which breach your email address was leaked from on this website: https://haveibeenpwned.com
It was christophorus16 who hacked my mailbox. Or so they claimed.
Same here,
Hello!
My nickname in darknet is wat62.
I hacked this mailbox more than six months ago, through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.
They had one of my really old crappy passwords I use on sites I don’t care about getting hacked on. Most likely an old site that got hacked and they sold the info. LOL! Lame hackers.
I also received this under different dark web name, but how are they sending from your own email account?
I also received that email but it has been identified as aleks70