Showing posts with label bitcoin. Show all posts
Showing posts with label bitcoin. Show all posts

Tuesday, 13 September 2016

Get an email titled 'Distributed Denial of Service?' Probably just ignore it

I got an email with a rather disturbing title yesterday. 


Here is the content of that email:
-----

We are,  New World Hacking Groups


We'll begin massive DDoS attack Today, you have 5 hours after reading your posts!!!


1 - We'll execute some targeted attacks and check your DDoS servers by the 500 Gbps attack power
2 - We can do multi-vector attacks Layer 3-7 TCP, UDP, SYN; NTP, DNS, SSDP - Amplification
3 - You do not help us antiddos, because we know your real IP address and it will always be able to find out
4 - Do not have time to change the hosting
5 - You can get away from the attack, if you pay 1.5 bitcoin to bitcoin ADDRESS:  1CB7Q8Mb77qSbkXnjynqGTjUTdFzFuV2EJ
6 - If you do not pay before the attack 1.5 bitcoin, the price will increase to 15 bitcoins
7 - Attacks every day will cost you 15 bitcoins
8 - We will continue to attack for a long time, as long as you do not pay!!!
9 - If you do not pay, we will destroy your business
                                                 Transfer 1.5 bitcoin to ADDRESS: 1CB7Q8Mb77qSbkXnjynqGTjUTdFzFuV2EJ


How to pay bitcoin? Google for the additional information!
----
Having been the target of a similar threat regarding the Patreon hack, I did a bit of due diligence, searching around to find out if anyone had reported on the same story. Nada.

According to the so-called hackers, I had 5 hours to pay them, but now we are way past that deadline with no ill effects. It seems pretty safe to say that if you ignore this email, you will be fine and so will your website!

Don't fall for these tricks if you can possibly avoid it.

[Photo by Colin / CC BY-SA 4.0]

Saturday, 21 November 2015

Patreon members getting blackmailed: Ignore that email...

During October, the Patreon website was hacked and a whole load of information was downloaded by the nasty little hackers involved. Now the blackmailers have decided to get in touch?


We were reassured by Patreon at the time of the hack that everything was OK and it was suggested that we change our password - sort of like closing the barn door after the horse has escaped, but anyway, I did.

Now more than a month later a nasty little blackmailing email arrives in my inbox, reading as follows:

 ----- Original Message ----- 
From: sharingservices@aol.com 
 To: xxxxxx@yahoo.com ; xxxxx@ceafoundation.org ; xxxx@gmail.com 
Sent: Saturday, November 21, 2015 1:54 PM 
Subject: Mia recommends - I will leak your identity 

Unfortunately your data was leaked in the recent hacking of the Patreon web site and I now have your information. I have your tax id, tax forms, SSN, DOB, Name, Address, Credit card details and more sensitive data. Now, I can go ahead and leak your details online which would damage your credit score like hell and would create a lot of problems for you. 

If you would like to prevent me from doing this then you need to send 1 bitcoin to the following BTC address. 

Bitcoin Address: 1QAQTyhCzAfvp8uLpneBNamWTNRR1hx9Cp 

You can buy bitcoins using online exchanges easily. The bitcoin address is unique to you. Sending bitcoin takes take, so you better get started right now, you have 48 hours in total. 
So I immediately went online and visited the Patreon site. No mention of any blackmail emails at that stage, so maybe I was the first? Anyway, I left a message in the help section of the site and have now finally received an email back. Apparently they have since heard from a lot of angry people, who also got the blackmail email.

Below is their response.  Basically we must just ignore the email - don't send any bitcoin to this nasty little character, whatever you do. Let's face it, he bears no relation to Mr Robot.  If anyone knows how to report the little bastard to Bitcoin, please go ahead!

Patreon Staff (Patreon)
Nov 21, 9:15 AM
Hey there,
Apologize for the blanket email but yet, we have received reports of emails being sent to many of the email addresses leaked in the breach, so you are not the only one who has received this threat.
Fortunately I can assure you that the person sending these emails is lying.
All tax forms are well protected because they are encrypted with RSA 2048-bit encryption. Additionally, tax forms are only required for US based creators that have earned more than $600 in a year, or non-US based creators who have received a payout from us.
Our system does not have access to your full credit card details, the only portion that gets passed to us is the last four digits of the number.
The unencrypted information that was leaked in the data breach does not present a risk to your credit score or identity theft. I suggest you report this email as spam and ignore any further emails. Do not send them bitcoin.
I'm sorry that you had to encounter this and I appreciate you sending it our way. Let me know if you have any additional questions.
Best,
Patreon
The only thing Patreon didn't reply about was my question about PayPal, which is how I support a musician on Patreon.

So there you go. If anyone has any more information, like, for e.g. whether the hacker can do something nasty with our PayPal accounts, please comment below.