Sextortion Emails: A New Wave of Scams

A recent surge in sextortion emails has been flagged by our malware removal support team. These emails, with subject lines like “You pervert, I recorded you!”, are a variation of the long-running “Hello pervert” scam.

How the Scam Works

The email claims the target’s device has been infected by a “drive-by exploit”, giving the extortionist full access to the device. To add credibility, the scammer includes a password that actually belongs to the target.

However, the message is contradictory, claiming the malware has been removed to “erase all traces”, but later promising to remove it after receiving payment.

Where the Password Comes From

The password is likely obtained from public inboxes of disposable email services like FakeMailGenerator. These services provide temporary, receive-only inboxes that can be used to avoid spam.

Meanwhile, users of these services should be aware that their inbox may be publicly accessible and show up in search results.

How to Stay Safe

To protect yourself from sextortion emails, follow these simple steps:

• Don’t rush: scammers rely on fear and urgency, so take a moment to think before reacting.
• Don’t reply to the email: responding tells the attacker that someone is reading messages at that address.
• Change your password if it appears in the email.
• Use a password manager to generate and store strong passwords.
• Don’t open unsolicited attachments, especially from suspicious senders.
• Don’t use disposable inboxes for important accounts.

Additionally, turn your webcam off or buy a webcam cover to prevent unauthorized access.

Conclusion

In conclusion, sextortion emails are a serious threat, but by being aware of the scam and taking simple steps to protect yourself, you can stay safe. Remember to always be cautious when receiving unsolicited emails and never pay extortion demands.

Finally, use Malwarebytes’ free Digital Footprint scan to see whether your personal information has been exposed online.

Frequently Asked Questions

1. What is a sextortion email? A sextortion email is a type of scam where the attacker claims to have compromising information about the target and demands payment in exchange for not releasing it.
2. How do I protect myself from sextortion emails? To protect yourself, don’t rush, don’t reply to the email, change your password, use a password manager, and don’t open unsolicited attachments.
3. What is a drive-by exploit? A drive-by exploit is a type of malware that can infect a device simply by visiting a malicious website.
4. Can I trust disposable email services? No, disposable email services are not secure and should not be used for sensitive information.
5. How can I check if my personal information has been exposed online? Use Malwarebytes’ free Digital Footprint scan to see whether your personal information has been exposed online.