Phishing

You got recorded – *?

October 8, 2019

Received: from BN8NAM11HT047.eop-nam11.prod.protection.outlook.com
(2603:1096:202::12) by HK0PR06MB3124.apcprd06.prod.outlook.com with HTTPS via
HK2PR0302CA0002.APCPRD03.PROD.OUTLOOK.COM; Mon, 7 Oct 2019 21:18:54 +0000
Received: from BN8NAM11FT045.eop-nam11.prod.protection.outlook.com
(10.13.176.57) by BN8NAM11HT047.eop-nam11.prod.protection.outlook.com
(10.13.177.11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2327.20; Mon, 7 Oct
2019 21:18:52 +0000
Authentication-Results: spf=none (sender IP is 45.175.236.225)
smtp.mailfrom=9325.com; live.com; dkim=none (message not signed)
header.d=none;live.com; dmarc=none action=none header.from=9325.com;
Received-SPF: None (protection.outlook.com: 9325.com does not designate
permitted sender hosts)
Received: from 45.175.236.211 by
BN8NAM11FT045.mail.protection.outlook.com (10.13.177.47) with Microsoft SMTP
Server id 15.20.2327.20 via Frontend Transport; Mon, 7 Oct 2019 21:18:50
+0000
X-IncomingTopHeaderMarker:
OriginalChecksum:29E901B2608033D32DB7050AC3D1ECCC8FC2A414EDACA56025427FE0B8701BBD;UpperCasedChecksum:15ECB04A78AD4543413FEFD6C3666C7850CFBAA04C7E0D295DB297AFCE932B9E;SizeAsReceived:408;Count:9
Received: from nqvadce ([12.64.200.60]) by 69085.com with MailEnable ESMTP; Mon, 7 Oct 2019 16:18:53 -0500
Received: (qmail 73795 invoked by uid 737); 7 Oct 2019 16:18:51 -0500
From: I Know [email protected]
To: [email protected]
Subject: You got recorded – *?
Date: Mon, 7 Oct 2019 16:18:53 -0500
Message-ID: [email protected]
Content-type: text/plain; charset=utf-8;
X-IncomingHeaderCount: 9
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 07 Oct 2019 21:18:52.8014
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
bc55aa20-46d7-4d0b-d1a6-08d74b6bf445
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
BN8NAM11FT045.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 10/7/2019 5:31:14 PM
X-MS-Office365-Filtering-Correlation-Id: bc55aa20-46d7-4d0b-d1a6-08d74b6bf445
X-MS-TrafficTypeDiagnostic: BN8NAM11HT047:
X-MS-Exchange-PUrlCount: 6
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 45.175.236.225
X-SID-PRA: [email protected]
X-SID-Result: NONE
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Antispam: BCL:0;
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2019 21:18:50.5419
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: bc55aa20-46d7-4d0b-d1a6-08d74b6bf445
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8NAM11HT047
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.8840902
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2327.025
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(8390120)(8376100)(8377080)(8375121)(8374160)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yrmAeNVLAMFDqKXyjydDWNlH+V/A+WUhiKt2AJ6A7kizDqpNvunuhwvCmo+VXMNQ0pOonejDer3TOMgeZrL9NDcYLUzmByc804OpAi0l5PUgbhEhCiS6Zkb8VA3lqHBMCcyHiUzh92zNLY1NudIJTO9QeLgDo524evMpQxy5xvSU1nRrVVOfDzl2KGRjR2vIw/V1/M5RaOUzw==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0

Hey, I know your password is: *?

Your computer was infected with my malware, RAT (Remote Administration Tool), your browser wasn’t updated / patched, in such case it’s enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more – Google: “Drive-by exploit”.

My malware gave me full access and control over your computer, meaning, I got access to all your accounts (see password above) and I can see everything on your screen, turn on your camera or microphone and you won’t even notice about it.

I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF!

After that I removed my malware to not leave any traces.

I can send the video to all your contacts, post it on social network, publish it on the whole web, including the darknet, where the sick people are, I can publish all I found on your computer everywhere!

Only you can prevent me from doing this and only I can help you out in this situation.

Transfer exactly 1400$ with the cryptocurrency DASH (DSH) to my DASH (DSH) address.

It’s a very good offer, compared to all that horrible shit that will happen if I publish everything!

You can buy DASH (DSH) here: www.cex.io , www.binance.com , www.bitpanda.com , or Google for other exchanger.
You can send the DASH (DSH) directly to my address, or create your online wallet first here: www.cryptonator.com , www.freewallet.org or download and install your hardware wallet EXODUS first from: www.exodus.io and then send to mine.

My DASH (DSH) address is: XnfypYUMso855erq8vmsdGcFPcnWeUh1G4

Copy and paste my address, it’s (cAsE-sEnSEtiVE).

I give you 2 days to transfer the DASH (DSH).

As I got access to this email account, I will know if this email has already been read.
If you get this email multiple times, it’s to make sure you read it, my mailer script has been configured like that and after payment you can ignore it!
After receiving the payment, I will remove everything and you can life your live in peace like before.

Next time update your browser before browsing the web!

Mail-Client-ID: 7379567041