Sextortion Scams Still Circulating
In the first half of 2019, variations of the Bitcoin sextortion email scams decreased; however, according to a Digital Shadows report, they are now making a comeback. Extortion scams are constantly evolving, using different scare tactics to convince victims to pay ransoms. Threat actors can use various tools, technologies, and stolen credentials to legitimize their threats. The commonality in these schemes, however, is that the threat actor claims to have compromised the victim’s device and recorded them visiting adult content websites, threatening the release of this recording to the victim’s contacts unless a payment is made. The NJCCIC recommends users educate themselves and others on this and similar scams to prevent future victimization. There is no indication that any of these unfounded threats are credible and these emails are to be ignored and deleted. We encourage users to report cyber incidents via the NJCCIC Cyber Incident Report Form and the FBI’s Internet Crime Complaint Center (IC3) website. For more information, please review the Malwarebytes Lab article.