Scamming scammers
Some weeks ago I was on holiday travelling in the beautiful Lofoten islands in Norway and one day I received this email:
Tickеt Dеtails: CQQ-349-58183
Email: <my email address>
Camera ready,Notification: 12-07-2018 06:22:28
Status: Waiting for Reply 62xuZaGy5A1f16wBnZmBkV6PrR0Ny94Su6_Priority: Normal
----------------------------------------------------------------------------------------------------
Good day,
If you were more attentive while playing with yourself, I wouldn't worry you. I don't think that playing with yourself is extremely bad, but when all your friends, relatives, сolleagues receive video record of it- it is undoubtedly [bad for you.
I seized malisious soft on a porn site which you have visited. When the target tap on a play button, device begins recording the screen and all cameras on ur device starts working.
Moreover, my virus makes a rdp supplied with key logger function from ur system , so I could get all contacts from ur e-mail, messengers and other social networks. I'm writing on this e-mail because It's your corporate address, so you must read it.
I think that three hundred usd is pretty enough for this little false. I made a split screen video(records from screen (interesting category ) and camera ooooooh... its funny AF)
So its ur choice, if u want me to delete ur disgrace use my bitсoin wallеt аddrеss- <bitcoin wallet address>
You have one day after opening my message, I put the special tracking pixel in it, so when you will open it I will see.If ya want me to show u the proofs, reply on this letter and I will send my creation to five contacts that I've got from ur contacts.
P.S... You can try to complain to cops, but I don't think that they can help, the investigation will last for one year- I'm from Ukraine - so I dgf LOL
I was so scared... not! There were three obvious mistakes:
- Reference to a corporate email address in an email sent to my personal address;
- Reference to a tracking pixel in an email sent only as text/plain (and without any pixel tracking into it);
- Reference to "a rdp supplied with key logger" to get access to the contacts.
And of course, last but not least, the whole text of that email came out with a simple search in google!
So I decided to go on an play a little game with them. I replied with this message:
Good day to you,
If you want to have money you should prove to me you really have it by showing it to me first. And if you have it and you send to my contacts, well, no money. So you decide what to do :)
I was expecting to never hear from them but no, the morning after I got this generic message (that of course had not what I asked for):
Oк!
This is a warning, after one day the evidence will be published
or,please make the payment
after that 100%, we will remove your video
you can be sure 98%,it will be seen by your relatives and friends on your job
Thank You!!!
Sent from my iPhone
So I went all-in with this one:
I see you're serious guys there so I have a business proposition for you: My company's associate was holding 10 million US dollars in a bank account in South Africa. Unfortunately he was assassinated last January by the rebels in Zimbabwe. If you would be helping moving those money out by hosting them temporarily in your bank account I can give you a 10% of those for your assistance (you do the math, it would be much more than the 300 you wanted).
I wonder why I didn't hear from them after this one... :D