Reported to the Internet Storm Center (https://isc.sans.edu) as a blackmail campaign

Hi, dear user of xxxxx. We have installed one RAT software into you device. For this moment your email account is hacked (see on <from address>, I messaged you from your account). Your password for xxx xxxxx: xxxxxx.....

This blackmailer / scammer uses wallet [cb3a69a4a8] /0234b8598e28750e with 52 bitcoin addresses for extortion and amounts to be transferred to wallets [33f98a67e4,] [9448f408f9], [e2b219375b], [8d3f03e97f], [012ba66908] [0f4e57fd91] and [012ba66908]

I could possibly forward all the naughty clips and snapshots combined with all the info of all the webpages you check out along with all your documents to all your contacts, close friends and family members but i do not think you wish me to do that. That definitely will have a pretty unwanted influence on your social life, in fact this will finish your social life, consider the shame! So continue reading and discover how to handle it. _x000D_ When you launched this message my setup triggered a timer, starting now you posses 9 hrs to make a contribution of $675 or 590€ to this specific bitcoin address: 1KCdoeuVYg9cmhHifWiuFs158ULMHJTGMa (copy paste this, it is case sensitive)._x000D_ If you have no idea how to utilise bitcoins take advantage of any internet search engine, it is extremely simple and there are a large amount of internet websites providing bitcoins instantaneously making use of your debit or credit card.

Used a LiveJournal password not in any database of compromised passwords.

Hi, dear user of r****d.com We have installed one RAT software into you device._x000D_ For this moment your email account is hacked (see on <from address>, I messaged you from your account)._x000D_ Your password for w****m@r****d.com: ****_x000D_ _x000D_ I have downloaded all confidential information from your system and I got some more evidence._x000D_ The most interesting moment that I have discovered are videos records where you masturbating._x000D_ _x000D_ [...]_x000D_ After installation, your front camera shoots video every time you masturbate, in addition, the software is synchronized with the video you choose._x000D_ [...]_x000D_ If you need to erase all of your collected data, send me $800 in BTC (crypto currency)._x000D_ This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ_x000D_ You have 48 hours after reading this letter._x000D_ _x000D_ After your transaction I will erase all your data._x000D_ [...]_x000D_ Bye!

Recived ... Hi, dear user of xxxx.co.uk_x000D_ We have installed one RAT software into you device._x000D_ For this moment your email account is hacked (see on <from address>, I messaged you from your account)._x000D_ Your password for pxxxxxx.co.uk: xxxx have downloaded all confidential information from your system and I got some more evidence._x000D_ The most interesting moment that I have discovered are videos records where you masturbating._x000D_ ..._x000D_ For the moment, the software has collected all your contact information from social networks and email addresses._x000D_ If you need to erase all of your collected data, send me $800 in BTC (crypto currency)._x000D_ This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ_x000D_ You have 48 hours after reading this letter._x000D_ _x000D_ After your transaction I will erase all your data._x000D_ Otherwise, I will send video with your pranks to all your colleagues and friends!!!_x000D_ ...

contains threat that he has access to my contacts and will release my video (shoot from my webcam) if $800 does not gets transferred.

After installation, your front camera shoots video every time you masturbate, in addition, the software is synchronized with the video you choose.

Your password for user@domain.com: password. I have downloaded all confidential information from your system and I got some more evidence. The most interesting moment that I have discovered are videos records where you masturbating. I posted my virus on porn site, and then you installed it on your operation system. When you clicked the button Play on porn video, at that moment my trojan was downloaded to your device. After installation, your front camera shoots video every time you masturbate, in addition, the software is synchronized with the video you choose. For the moment, the software has collected all your contact information from social networks and email addresses. If you need to erase all of your collected data, send me $800 in BTC (crypto currency). This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ You have 48 hours after reading this letter.

We have installed one RAT software into you device. For this moment your email account is hacked (see on <from address>, I messaged you from your account).Your password _x000D_ I have downloaded all confidential information from your system and I got some more evidence._x000D_ The most interesting moment that I have discovered are videos records where you masturbating.I posted my virus on porn site, and then you installed it on your operation system._x000D_ When you clicked the button Play on porn video, at that moment my trojan was downloaded to your device.After installation, your front camera shoots video every time you masturbate, in addition, thed data, send me $800 in BTC (crypto currency)._x000D_ This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ_x000D_ You have 48 hours after reading this letter._x000D_ After your transaction I will erase all your data._x000D_ Otherwise, I will send video with your pranks to all your colleagues and friends!!!

Détails de lanalyse du message: (15.7 points, 5.0 requis)_x000D_ 8.5 SNF4SA_x000D_ Message Sniffer_x000D_ 1.3 RCVD_IN_RP_RNBL_x000D_ RBL: Relay in RNBL,_x000D_ https://senderscore.org/blacklistlookup/_x000D_ [102.157.111.201 listed in bl.score.senderscore.com]_x000D_ 0.7 RCVD_IN_XBL_x000D_ RBL: Received via a relay in Spamhaus XBL_x000D_ [102.157.111.201 listed in zen.spamhaus.org]_x000D_ 1.3 RDNS_NONE_x000D_ Delivered to internal network by a host with no rDNS_x000D_ 2.5 TO_EQ_FM_DIRECT_MX_x000D_ To == From and direct-to-MX_x000D_ 1.4 DOS_OUTLOOK_TO_MX_x000D_ Delivered direct to MX with Outlook headers_x000D_ -------------------- Fin de Rapport SpamAssassin ---------------------_x000D_ X-Spam-Flag: YES_x000D_ Subject: ***SPAM***_x000D_ Security Warning_x000D_ X-AntiAbuse: This header was added to track abuse, please include it with any abuse report_x000D_ X-AntiAbuse: Primary Hostname - jambon.o2switch.net_x000D_ X-AntiAbuse: Original Domain - xxx.com_x000D_ X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]_x000D_ X-AntiAbuse: Sender Address Domain - xxx.com

extortion email: For the moment, the software has collected all your contact information from social networks and email addresses. If you need to erase all of your collected data, send me $800 in BTC (crypto currency)._x000D_ This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ_x000D_ You have 48 hours after reading this letter.

Same as prior reports

Sent message as mention in post earlier