All language subtitles for 1. Bitcoins

This video, we're taking a look at a real scam.

This involves bitcoin in its extortion.

So I want to make this video because these these kind of emails have been making the rounds quite a

bit lately, and this is actually one that hit a user at one of them at the place I am working at right

now.

So I took out some of the critical information, like actual email address and that.

But let's take a look at this email.

So in this email?

The to address was spoofed.

So it's actually spoofing one of the email addresses that that user actually had.

So we continue on this email.

It says, Hello, my name is dark.

My nickname and darknet is Zachary, 31.

That tends to change.

Even if it's the same person running this scam, they tend to change whatever they're suppose a dark

name is or darknet name.

As I hacked your mailbox more than six months ago through it, affected your operating system with a

virus trojan created by me and have been monitoring you for a long time.

So your password is our password from and then they give the user email address is.

Then they give the supposed password for that particular email.

Now the way that works is typically the person will go grab information from a data dump so I can buy

a data dump for around 10, $20 or so.

Grab a bunch of username and passwords.

And that's what these people are typically doing or searching Aaron and finding a data dump that was

published for free.

Now in here, they'll pick up to look for people with email addresses and passwords that got leaked.

These may still be valid or they may be changed.

They really don't know and generally don't care because once they send these emails out, when a person

generally sees, Oh, this is my email and this is really the password that's associated to it.

They begin to panic whether they actually did anything wrong or not.

And that's how these scams work.

Now let's continue with the email human.

If you change your password after that, it doesn't matter.

My virus intercepted all of your caching data from your computer and automatically saved access for

me.

I have access to all your accounts, social networks, email browsing history accordingly.

I have the data of all your contact files from your computer's photos videos.

I was most struck by the intimate con content sites that you occasionally visit.

You have a very weird or very wild imagination.

I tell you during your pastime entertainment here, I took screenshots to your camera of your device

synchronizing with what you're watching.

Oh my god, you're so funny.

Excited.

I think you don't want one of all your contacts, get these files right.

If you are of the same opinion, then I think that 837 is quite fair price to destroy the dirt I created.

So there is the extortion part.

And generally, for people, whether they actually did anything wrong or not, they generally worry

that, hey, my, so my critical data is out there days in a dump.

Or maybe he's just going to dump a bunch of bogus information.

I have been going all these crazy sites when I haven't been to my contacts.

So this plays on fear for people.

Since the above amount, my bitcoin wallet and he gives the bitcoin address, which I'm going to copy

right now, and I'm going to show you why in a moment.

As soon as the above amount is received, I guarantee the data will be deleted.

I do not need it.

Otherwise, his files in history of his insights will will get all your contacts from your devices.

I'll send everyone your contact access to your email as access logs.

I have carefully saved it since reading this letter.

Have 48 hours after reading this message.

I'll receive an automatic notification that you have seen the letter.

And it goes on to.

Essentially saying that.

That they feel like they're doing you a service.

So let's break this down a little bit.

Supposedly, someone has her email and password.

So in general, again, that usually freaks people out because let's be honest, people usually have.

Really bad passwords, and they have a bad habit of recycling passwords, that's why you shouldn't recycle

passwords of all possible.

The legitimacy of this is a lot of people say, Yeah, that is my email, that's my password or that

used to be my password.

As he knows the contextualize it by saying, even if you change your password, I still have access.

So that that also freaks people out.

But again, this generally comes from data dumps.

So you do want to keep that in mind in that regard.

It's kind of worthless.

But they are trying to scam you, they are trying to get money from you.

And if you're doing Olson, then this gets a little tricky.

So bitcoin are designed to be anonymous, so it is kind of hard to track them.

What you can do is there are certain tricks where if you send.

A certain amount of bitcoin to someone you can kind of trace where it's going.

I don't recommend actually spending money or giving any amount of money to anyone that's trying to scam

you, extort you.

But in order to help alleviate some fear from people, if you're doing a Olson investigation for someone

again, they don't have to do anything wrong.

People that don't do anything wrong still might freak out because they, you know, they're still worried

that this person is on my account.

They have my, you know, critical information that they have email that's confidential and they're

going to send it out to everyone.

Or they might spread a bunch of lies about me and embarrass me, especially people in higher up positions

as CEOs, managers and whatnot.

It's kind of hard for them to have their reputation tarnished, whether it's real or not.

So a lot of people feel compelled to actually pay these ransoms.

So what you could do is there's a couple of things you could do.

One is you could try.

You could do a bitcoin look up and if you go to Bitcoin.

Who's who?

Dot com, you could enter in the bitcoin wallet and kind of see a little bit of the transaction history

of it.

Now the other thing you could do is you can go to Hashed and have I been conned and put that email address

in that that they said they got a hold of?

And you also can go to pwned passwords.

I generally like to use all these sites.

You put the email address, you put the password.

In that way, you could say, Hey, your email has been part of, you know, eight data breaches dates

back at this time, which kind of matches in this information here your password is also came up in

a data breach.

It's been part of these breaches, so this is where this is coming from.

You know?

So this is how they got your information, it's not they actually hacked your account.

This is your actual information.

Well, that point you tell the user you changed your password if you don't change it already.

If you're using Gmail or there's similar services, make sure you sign out of all the accounts.

Review Security Check.

Make sure that no one's been logging your account.

Chances are no, they haven't logged in your account, but it's always good to run that check.

Now, let's go back to the bitcoin address, look up.

So I'm going to pieces in here.

And we have there a bitcoin war, I'm just going to click a little magnifying glass and start to search.

Can we give this sick?

And here we go.

OK, so this is pretty cool, so we can actually see quite a bit of history on this so we can see this

bitcoin address appeared on four web sites.

I can click to see what websites you've been on.

There's a wallet name.

The current balance is almost one bitcoin and.

Well, you could see there's eight transactions, which when I looked this up yesterday, you only had

two.

So apparently he got a few more people.

Now you can look at the first transaction.

If we click on scam alert, we could see all these people that reported this a scam.

And again, this can add legitimacy to your report.

When you're reporting back to someone, say, Hey, this is a scam, don't pay it.

Here's a bunch of scam alerts for that particular email, and you can see all these are sextortion,

hack, blackmail and whatnot.

And if I click on any of these things here.

You could see it's a similar format.

My nickname is darknet, and the name has changed.

Kelby 27.

I hacked to your mailbox six months ago and a your operating system with the Trojan password is blank

like blank.

So essentially, it's the same email address again.

And the other thing I like about running the Bitcoin wallet through here is some of these other ones

here.

They people did get additional information, including the IP address.

And again, you can take that IP address.

You can run through your IP tracer.

And if you do that, you'll find out this person's from South America, which kind of lends credibility

to why voice English is a little broken.

Is not a Native American United States individual.

So.

That's all great information.

And again, it's this will really go a long way for when you put it in the report that saying that,

hey, don't pay this, you could see all these people report all these different scams.

And if I click on here, I could see the different websites and it's come up on scam survivors dot com.

This Twitter post is talking about it.

Another Twitter post talking about we could take a look at the transaction history, so we could say

that we could see this bitcoin wallet paid that address in how much they they got and all the time and

date.

So that's that's additional interesting information just to have.

Again, it's going to be pretty hard to trace back to the actual individual, but it is interesting

to take a look at what the pattern of this is.

And also, you can run this through a Maltego if you want to verify this information, which I did yesterday

when it had two transactions.

Those transactions also appeared to Maltego same amount, same wallets and whatnot.

So again, if you really need to prove that to your client that, hey, this is a scam, this is all

the old things going on with it, the way you can kind of verify the information is diminished.

Have I been Pwn2Own passwords?

Bitcoin address lookup, which is bitcoin, who's who dot com and then run a Maltego scan?

So this is all about bitcoin scams and extortion scams.

Thank you for watching the video.