[Sequanux-ml] RANSOMWARE pour cible geek : Security Notice. gilles at sequanux.org was hacked! Change your password now!

[robert gilles]

 From - Fri Mar  3 08:52:20 2023
X-Account-Key: account9
X-UIDL: 5319de6600002f9e
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys: 

Return-Path: <wandaboles58 at men.highnom.com>
Delivered-To: gilles at sequanux.org
Received: from localhost (localhost.localdomain [127.0.0.1])
	by vm3.sequanux.org (Postfix) with ESMTP id 9FE7D10861D
	for <gilles at sequanux.org>; Fri,  3 Mar 2023 00:11:45 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at vm3.sequanux.org
Received: from vm3.sequanux.org ([127.0.0.1])
	by localhost (vm3.sequanux.org [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id tv5SQA6aAqVh for <gilles at sequanux.org>;
	Fri,  3 Mar 2023 00:11:19 +0100 (CET)
Received: from [185.93.99.222] (unknown [185.93.99.222])
	by vm3.sequanux.org (Postfix) with ESMTP id D725C1085F1
	for <gilles at sequanux.org>; Fri,  3 Mar 2023 00:11:18 +0100 (CET)
Message-ID: <256AE88955A70B347BF99844B61A256A at men.highnom.com>
From: <wandaboles58 at men.highnom.com>
To: <gilles at sequanux.org>
Subject: Security Notice. gilles at sequanux.org was hacked! Change your 
password now!
Date: 3 Mar 2023 01:38:13 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="cp-850"
Content-Transfer-Encoding: 8bit
X-Mailer: Vdayayfs iblvxy 5.6


Dear user of sequanux.org!

I am a spyware software developer.
Your account has been hacked by me couple months ago.

The hacking was carried out using a hardware vulnerability through which 
you went online (Cisco router, vulnerability CVE-2023-20026).

I went around the security system in the router, installed an exploit there.
When you went online, my exploit downloaded my malicious code (rootkit) 
to your device.
This is driver software, I constantly updated it, so your antivirus is 
silent all time.

Since then I have been following you (I can connect to your device via 
the VNC protocol).
That is, I can see absolutely everything that you do, view and download 
your files and any data to yourself.
I also have access to the camera on your device, and I periodically take 
photos and videos with you.

At the moment, I have harvested a solid dirt... on you...
I saved all your email and chats from your messangers. I also saved the 
entire history of the sites you visit.

I note that it is useless to change the passwords. My malware update 
passwords from your accounts every times.

I know what you like hard funs (adult sites).
Oh, yes .. I'm know your secret life, which you are hiding from everyone.
Oh my God, what are your like... I saw THIS ... Oh, you dirty naughty 
person ... :)

I took photos and videos of your most passionate funs with adult 
content, and synchronized them in real time with the image of your camera.
Believe it turned out very high quality!

So, to the business!
I'm sure you don't want to show these files and visiting history to all 
your contacts.

Transfer $1300 to my Bitcoin cryptocurrency wallet: 1PNWAf qoNQhTR2 
jCpcSPL 6P5XrC xCofqB3
Just copy and paste the wallet number when transferring.

An important notice: I have specified my Bitcoin wallet with spaces, 
hence once you carry out a transfer, please make sure that you key-in my 
bitcoin address without spaces to be sure that your funds successfully 
reach my wallet!

If you do not know how to do this - ask Google.

My system automatically recognizes the translation.
As soon as the specified amount is received, all your data will be 
destroyed from my server, and the rootkit will be automatically removed 
from your system.
Do not worry, I really will delete everything, since I am 'working' with 
many people who have fallen into your position.
You will only have to inform your provider about the vulnerabilities in 
the router so that other hackers will not use it.

Since opening this letter you have 48 hours.
If funds not will be received, after the specified time has elapsed, the 
disk of your device will be formatted,
and from my server will automatically send email and sms to all your 
contacts with compromising material.

P.S. Do not try to contact me (this is impossible, sender's address was 
randomly generated).

I advise you to remain prudent and not engage in nonsense (all files on 
my server).

Good luck!