Office of Information Technology
June 16, 2022
Tags Phishing Email (on campus)

You have an unpaid bill. ("sextortion" phish)

Phish Bowl Alerts

The "sextortion" phishing email has been reported at Brown again, threatening to reveal unsavory secrets if the recipient doesn't promptly pay up (this time $1200 in bitcoins). Should you receive it, mark it as phishing (open the message within a browser, click on the stack of three dots to the right of the REPLY button and select "Report phishing") to alert Google. 

From: Eileen Lane <kkh@heemangfdn.or.kr>
Date: Sat, May 28, 2022 at 4:42 AM
Subject: You have an unpaid bill.
To: <josiah_carberry@brown.edu>

Hello.
This is  your very  last notification. 

I compromised  your computer system  thru the  Wireless  device you  were connected  to.

Several  months prior,  I easily accessed  the devices  that you  used  to get  on-line.

All the  info from the  electronics &  devices was immediately  replicated to  my web  servers.

I  have  access to all  your cellphone  messengers,  social  network sites,  emails, chat  history, &  contact-list.

My  malware  repeatedly upgrades  its signatures (driver based),  for that  reason it  remains not  visible to  antivirus applications. I imagine  at  this point  you realize, exactly  why I  stayed unnoticed until this  exact day

Whilst  get  together information  in  regards to  you, I found  you're a  big fan  of mature  web pages and  much  more.

You  actually  prefer  to  go to porn  sites and  view  filthy video  clips whilst  getting an  orgasm.

I've  already made  a web camera capturing videos  of you  wanking off.  A montage of  the video you  were  watching at  that time  & your  self  pleasure. Your own  facial  area is  obviously obvious.  I don't  think  this particular  content  would  be good for  your  reputation.

I  can easily  send this  video  to  every person  who  know who  you are.

I  additionally have  no trouble  with  rendering all  your personal  info open  public on the  net. I'm  sure  you understand  what  I'm  talking about.

It'll be  a huge failure for  you.

I'll  destroy your life  for a  long time. I  suspect  that you  do  not need  that to  occur.

Let us  fix it that  way:  you send  me 1200  $ (usd) using  Bitcoin  equivalent at  the time  of financial  transaction), &  i'll  promptly  erase all of  your data  from my machines. Proceeding that, we  will disregard one  another.

My  bitcoin transaction address for transaction:  [ removed ]

Should  you not understand  how to  send cash  and  what Bitcoin  is. Simply  just type  in  the Google "Get  bitcoin".

I present you with  2  working days to  send  the funds.

The  timer launched  monitoring instantly  after you opened  up this  email. 

I'll  see an  alert once this  e-mail is  opened.

Don't  try to look  for help,  as the  wallet can not  be monitored,  e mail the  message is  originating from &  can not  be tracked  also and  created digitally,  therefore there's  no  reason  for writing  to  me.

Don't  make  an attempt  to get  in touch with  the police and  other  protection solutions,  & should  you choose  to  do, your  own  info will  be posted.

Changing  online-passwords  in social  networking sites,  email, and  gadgets isn't going  to help  you, as  all the  information has  already been  saved to  my web  servers.

All  the best  .  and avoid doing  something silly.  Think about your  forthcoming future.