{"id":12488,"date":"2019-07-15T16:07:44","date_gmt":"2019-07-15T14:07:44","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/email-spoofing\/"},"modified":"2019-07-15T16:07:44","modified_gmt":"2019-07-15T14:07:44","slug":"email-spoofing","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/email-spoofing\/","title":{"rendered":"Email Spoofing"},"content":{"rendered":"

Have you ever had this unhealthy sensation of being accused of facts that do not concern you? To feel helpless in the face of an accusing mail, which, because of its imperative and accusing tone, has the gift of throwing us the opprobrium?<\/span><\/p>\n

This is the purpose of this particular kind of sextortion mail that uses spoofing, to try to extort money from you. A message from a supposed “hacker” who claims to have hacked into your computer. He threatens you with publishing compromising images taken without your knowledge with your webcam and asks you for a ransom in virtual currency most of the time.<\/span><\/p>\n

<\/p>\n

Something like that:<\/span><\/p>\n

 <\/p>\n

\n
From:\u00a0<\/span><\/b><\/span><oneperson@dbi-services.com<\/span><\/a>><\/span><\/div>\n
Date:\u00a0<\/span><\/b><\/span> Friday, 24 May 2019 at 09:19<\/span> UTC+1
<\/span><\/div>\n
To:\u00a0<\/span><\/b><\/span><oneperson@dbi-services.com<\/span><\/a>>
<\/span><\/div>\n
Subject: <\/b><\/span>oneperson<\/span><\/b><\/span><\/div>\n
<\/div>\n
\n
Your account is hacked! Renew the pswd immediately!
You do not heard about me and you are definitely wondering why you’re receiving this particular electronic message, proper?
I’m ahacker who exploitedyour emailand digital devicesnot so long ago.
Do not waste your time and make an attempt to communicate with me or find me, it’s not possible, because I directed you a letter from YOUR own account that I’ve hacked.
I have started malware to the adult vids (porn) site and suppose that you watched this website to enjoy it (you understand what I mean).
Whilst you have been keeping an eye on films, your browser started out functioning like a RDP (Remote Control) that have a keylogger that gave me authority to access your desktop and camera.
Then, my softaquiredall data.
You have entered passcodes on the online resources you visited, I intercepted all of them.
Of course, you could possibly modify them, or perhaps already modified them.
But it really doesn’t matter, my app updates needed data regularly.
And what did I do?
I generated a reserve copy of every your system. Of all files and personal contacts.
I have managed to create dual-screen record. The 1 screen displays the clip that you were watching (you have a good taste, ha-ha…), and the second part reveals the recording from your own webcam.
What exactly must you do?
So, in my view, 1000 USD will be a reasonable amount of money for this little riddle. You will make the payment by bitcoins (if you don’t understand this, search \u201chow to purchase bitcoin\u201d in Google).
My bitcoin wallet address:
1816WoXDtSmAM9a4e3HhebDXP7DLkuaYAd
(It is cAsE sensitive, so copy and paste it).
Warning:
You will have 2 days to perform the payment. (I built in an exclusive pixel in this message, and at this time I understand that you’ve read through this email).
To monitorthe reading of a letterand the actionsin it, I utilizea Facebook pixel. Thanks to them. (Everything thatis usedfor the authorities may helpus.)

In the event I do not get bitcoins, I shall undoubtedly give your video to each of your contacts, along with family members, colleagues, etc?<\/div>\n<\/div>\n<\/blockquote>\n

 <\/p>\n

Users who are victims of these scams receive a message from a stranger who presents himself as a hacker. This alleged \u201chacker\u201d claims to have taken control of his victim’s computer following consultation of a pornographic site (or any other site that morality would condemn). The cybercriminal then announces having compromising videos of the victim made with his webcam<\/b>. He threatens to publish them to the victim’s personal or even professional contacts if the victim does not pay him a ransom. This ransom, which ranges from a few hundred to several thousand dollars, is claimed in a virtual currency (usually in Bitcoin but not only).<\/span><\/p>\n

To scare the victim even more, cybercriminals sometimes go so far as to write to the victim with his or her own email address<\/b>, in order to make him or her believe that they have actually taken control of his or her account.<\/span>\u00a0<\/span><\/p>\n

First of all, there is no need to be afraid of it. Indeed, if the “piracy” announced by cybercriminals is not in theory impossible to achieve, in practice, it remains technically complex and above all time-consuming to implement. Since scammers target their victims by the thousands, it can be deduced that they would not have the time to do what they claim to have done.<\/span>\u00a0<\/span><\/p>\n

These messages are just an attempt at a scam<\/span><\/b>. In other words, if you receive such a blackmail message and do not pay, nothing more will obviously happen.<\/span>\u00a0<\/span><\/p>\n

Then, no need to change your email credentials. Your email address is usually something known and already circulates on the Internet because you use it regularly on different sites to identify and communicate. These sites have sometimes resold or exchanged their address files with different partners more or less scrupulous in marketing objectives.<\/span><\/p>\n

If cybercriminals have finally written to you with your own email address<\/b> to make you believe that they have taken control of it: be aware that the sender’s address in a message is just a simple display that can very easily be usurped without having to have a lot of technical skills.<\/span>\u00a0<\/span><\/p>\n

In any case, the way to go is simple: don’t panic, don’t answer, don’t pay, just throw this mail in the trash (and don’t forget to empty it regularly).<\/span>\u00a0<\/span><\/p>\n

On the mail server side, setting up certain elements can help to prevent this kind of mail from spreading in the organization. This involves deploying the following measures on your mail server:<\/span><\/p>\n