I KNOW YOU OPENED MY LAST MAIL Scam

Facts aboutI KNOW YOU OPENED MY LAST MAIL Scam“.

Similar to the majority of other tricky spam campaigns, “I KNOW YOU OPENED MY LAST MAIL Scamis run and controlled by the team of online frauds who elaborate threats and pose certain ransom requirements. These alerts normally indicate that they have stolen your personal details and made a compromising video or picture of you. They pose threats mentioning that if you do not want this information to be delivered to all of your available contacts, you should initiate a ransom payment. This is a common scam and there is no need to be worried about.

Often, online frauds deliver the aforesaid emails to many victims (the figure may amount even to millions). Based on the statement of the alert, malicious code has been recently uploaded to your PC that lets cyber frauds keep records your personal data (passwords, available contacts, etc.). They also mention that they have uploaded a remote access utility and that they can survey over all your actions online. In this particular instance, the crooks indicate that they have taken photos of you while you were attendingshockingpages (allegedly, pornographic ones). It proceeds on to indicate that you shold now transfer $870 in Bitcoins, otherwise this information will be delivered to your colleagues, friends, members of your family and all other persons in your contacts. The crooks mention that you should make the payment within 48 horas. The developers of theI KNOW YOU OPENED MY LAST MAIL Scammessage indicate that if you do not comply with the requirements, they will lock your device and transfer the pictures to your contacts. All other online frauds apply similar approaches. We strongly advise that you simply disregard them and do not transfer any ransom amount.

Threat Facts:
Nome I KNOW YOU OPENED MY LAST MAILspam campaign
Threat Type Phishing, Fraude, Social Engineering, Fraude
Faulty Claim Frauds falsely indicate that they’ve injected victim’s device with a virus that collected compromising information (video) of the message recipient. They also blackmail the victim by falsely promising to transfer the video to all the victim’s contacts in case a ransom amount is not transferred.
Sintomas Unapproved online purchases, amended online account credentials, identity theft, illegal access of the PC.
Distribution channels Tricky emails, milsleading online pop-up advertisemetns, search engine hijacking techniques, displaying fake (improperly spelled) domains.
Negative impact Loss of crucial personal data, financial loss, identity theft.
Eliminação To delete possible malware threats our virus researchers suggest scanning your PC with Loaris Trojan Remover .

Free scanner inspects whether your device is messed up. To delete malware, you need to buy the full version of Loaris Trojan Remover.

Other versions of spam campaigns very identical toI KNOW YOU OPENED MY LAST MAIL Scamare known under the namesEmbed A Malware On The Web Page”, “Hacker Who Cracked Your Email And Device”, e “Remote Control Desktop With A Key Logger”. These are just some casual examples from many other available variants. Most spam campaigns are applied to trick the users into transferring the funds to cybercriminals, who indicate to own embarrassing or compromising information regarding the victim. In spite of this, not all scammers present ransom requirements. Some transfer emails with dubious attachments and suggest the users to open them. The attachments are normally Microsoft Office files, such as Word, Excel, PowerPoint, etc.. Do not ever interact with these attached files, since they contain high-risk malware such as TrickBot, Adwind, FormBook, and other similar infections. Threats of this type might cause information loss or even financial troubles. They are often elaborated to collect people’s personal data such as bank account credentials, passwords, logins, e assim por diante. These activities can result in various issues associated with privacy, browsing safety, finances, etc.. These threats might also revealbackdoorsfor other threats, such as ransomware-type infections.

We get a great portion of feedback from scared customers regarding this scam email. Here is the most common question we get:

Q: Hi loaris.com team, I got an email indicating that that my PC was infected and they have a video file depicting me. Now they are demanding a ransom in Bitcoins. I believe this must be true because they mentioned my real name and password contained in the email. What must I do in this case?

A: Disregard this email. Neither the frauds nor cyber criminals have infected/hacked your device and there is no video of you watching pornographic information. Just disregard the alert and do not transfer any Bitcoins. Your email, name, and other important credentials were probably stolen via a hacked webpage such as Yahoo (such website breaches are quite typical).

How do spam campaigns attack PCs?

Spam campaigns that promote dubious attachments normally apply Microsoft Office files. If opened, they prompt the victims to enable macro commands, which then grants permission for viruses to be downloaded and injected. Esse, no entanto, only functions with the Microsoft Office environment. In case the attachment is launched via the software other than Microsoft Office applications, the virus will not be injected. Obviamente, most spam campaigns attack Windows owners who own Microsoft Office products. The clients of other operating systems (or those who are not the customers of Microsoft Office) are normally safe.

How to prevent intrusion of malware?

If you get an email from an unknown/suspicious addressee with an irrelevant attachment, do not ever open it without first carefully researching the email. Download programs by means of official and reliable resources only. Do not use any third-party software downloading clients or installers, because these are often supported by means of advertising rogue programs. Install programs with caution and make sure to always opt forCustom”, “Advancedinstallation mode, and other similar approaches. In some instances, software developers refer to thebundlingchannel, thus potentially unwanted programs are concealed within download/installation menu. Por isso, update programs by means of utilities or implemented features rendered by the official developers. Faulty software updaters must not be applied, because they contain potentially unwanted, fake utilities. You are recommended to use Microsoft Office 2010 or its later versions. Older versions do not have aProtected Viewmode, which blocks downloaded documents (malicious email attachments) from downloading and installing unwanted software. If you have already launched specific malicious attachments, we suggest running a scan with Loaris for Windows to automatically delete injected threats.

The text contained in theI KNOW YOU OPENED MY LAST MAIL Scamemail alert:

I KNOW YOU OPENED MY LAST MAIL
You have 24hs or I'm going to send the video to your contacts and post it on every socia1 network.
Or maybe I'm going to send it to a few selected contacts, so you understand this is not a joke.
I'm not going to wait anymore now that I know YOU READ MY MAIL.
I know your password is:
Your computer was infected with my malware, RAT (Remmote Administration Tool), your browser wasn"t updated / patched, in such case it"s enough to just vissit some website where my iframe is placed to get automatically infected.
My malware gave me full acccess and control over your computer, meaning, I got acccess to all your accounts (see pass word above) and I can see everything on your screen, turn on your camera or microphone and you won"t even notice about it.
I collected all your private data and I RECORDED YOU (through your web-cam) SATISFYING YOURSELF!
After that I removed my malware to not leave any traces.
I can send the video to all your contacts, post it on the social network, publish it on the whole web, including the darknet, where the sick people are, I can publish all I found on your computer everywhere!
Only you can prevent me from doing this and only I can help you out in this situation
Transfer exactly 900$ with the current bitcoin (BTC) price to my bitcoin address.
It"s a very good offer, compared to all that horrible **** that will happen if I publish everything!
You can easily buuy bitcoin here:
You can send the bitcoin directly to my address, or create your own wallet first here: , then receive and send to mine.
My bitcoin address is:
Copy and paste my address, isto"s (cAsE-sEnSEtiVE)
I give you 2 days time to transfer the bitcoin!
As I got acccess to this email account, I will know if this email has already been read.
If you get this email multiple times, isto"s to make sure you read it, my mailer script has been configured like that and after payment you can ignore it.
After receiving the payment, I will remove everything and you can life your live in peace like before.
Next time update your browser before browsing the web!

Immediate automatic elimination of possible virus threats:

Manual malware elimination might be a time-consuming and complex procedure that implies extended PC knowledge. Loaris Trojan Removedor is an effective and automatic virus elimination software that will help you to delete possible virus threats. Download it by means of the button provided below:

Loaris Trojan Removedor - logotipo

Baixe Agora

By means of downloading any program listed on this webpage you agree to our política de Privacidade e Contrato de Licença. Free scanner inspects whether your device is damaged. To delete infections, you need to buy the full version of Loaris.

 
Quick menu:

How to delete infections manually?

Manual virus elimination is a complex procedureusually it is best to let antivirus or anti-malware utilties to perform this in an automatic manner. To delete this infect we suggest using Loaris Trojan Removedor. If you would like to delete the threats manually, the first milestone is to establish the name of the malware that you are attempting to delete. Here is an example of a suspicious software running on a user’s device:

If you inspected the list of applications available on your device, for example by means of the Gerenciador de tarefas, and located a utility that looks unsafe, you need to proceed with these steps:

Etapa 1 Download a software named System Explorer. This application displays auto-start programs, Registry, and file system paths:

System Explorer screen

Etapa 2 Reboot your PC into Modo de segurança:

janelas 8 users: Launch Windows 8 is Safe Mode with NetworkingProceed to Windows 8 Start Screen, specify Advanced, in the search results choose Settings. Select Advanced startup options, in the openedGeneral PC Settings” janela, choose Advanced startup. Selecione os “Restart now” botão. Your PC will now reload into theAdvanced Startup options menu”. Selecione os “Solucionar problemas” botão, and then choose the “Opções avançadas” botão. In the advanced options menu, escolher “Startup settings”. Selecione os “Reiniciar” botão. Your device will reload into the Startup Settings screen. Hit F5 to load in Safe Mode with Networking.

janelas 10 users: Click on the Windows logo and select the Power icon. In the opened menu select “Reiniciar” while holding “Mudança” button on the keyboard. No “choose an optionwindow select the “Solucionar problemas” área, após, escolher “Opções avançadas”. In the advanced options menu choose “Configurações de inicialização” and select the “Reiniciar” botão. Na próxima janela, you need to click the “F5” button on your keyboard. This will reboot your system in safe mode with networking.

Safe Mode Restart

Etapa 3 Run the SystemExplorerSetup.exe file.

SystemExplorerSetup.exe Run

Etapa 4 Check the list rendered by the System Explorer program and find the malware file that you need to delete.

You need to write down its full destination and name. Keep in mind that certain virus masks process names under decent Windows process names. Neste ponto, it is very important to avoid deleting important system files. Once you establish the suspicious application you would like to delete, right click your mouse over its name and selectFim do processo“.

System Explorer End Process

After deleting the virus via the System Explorer software (this guarantees that the virus will not launch itself automatically upon the next system startup), you need to look for the malware name on your PC. Make sure to enable hidden files and folders before you proceed. If you establish the filename of the virus, make sure to delete it.

Program delete

Reload your PC in normal mode. Following these milestones should delete any malware from your PC. Keep in mind that manual virus elimination requires extended PC skills. If you are not technically savvy, leave virus elimination to antivirus and anti-malware utilities. These milestones might not help with extended virus infections. As usual, it is best to avoid infections than attempting to delete the threats later on. To maintain your PC in a safe condition, install the latest operating system updates and always refer to the help of antivirus programs.

To make sure your PC is free of malware threats, we suggest scanning it with Loaris Trojan Removedor.

Sobre o autor

Valdis Kok

engenheiro de segurança, engenharia reversa e forense de memória

Deixe um comentário