New Phishing Campaign Uses Blackmail to Lure Victims

BlackMail phishing campaignBitdefender has observed a phishing campaign that tries to blackmail users into sending money by claiming their computer has been hacked. The emails contain real passwords that have been leaked, in order to convince the recipient that the claims are legitimate.

“In this case, spammers attempt to fool recipients by referring to old passwords and existing email addresses, most of which have already been exposed online,” Bitdefender says. “The perps specify that login credentials to your online accounts were purchased from the web and used to install malicious software and spyware on your device. They use scare tactics to induce a sense of panic in recipients, threatening to expose a video montage containing lewd scenes of victims watching adult videos online to friends and family.”

The researchers note that this technique isn’t new, but the scale of the campaign is significant.

“The attacks spread across the globe, with unusually high numbers of spam emails reaching users in Romania (over 400,000 emails), Italy and the Netherlands,” the researchers write. “The messages originate from multiple IP addresses in Europe, Asia, Africa and the Americas. It seems they've been distributed in masses via a large spam botnet controlled by the same threat group.”

Bitdefender offers the following recommendations for users:

  • “Stay calm and analyze the situation – even if the email includes your password, it was likely gathered from previous data breaches and leaks. If the scammer says your system is already infected with malicious software and spyware, why would he need you to personally transfer the ransom amount? He could easily harvest all of your account passwords and start draining your financial accounts?
  • “Review and update your account passwords regularly
  • “Never respond to threatening messages by asking the perps to provide you with a different payment method; report them to local authorities instead
  • “Install a local security solution on your devices
  • “Enable two-factor or multi-factor authentication”

New-school security awareness training can give your users a healthy sense of suspicion so they can avoid falling for these attacks.

Bitdefender has the story.

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

PST ResultsHere's how it works:

  • Immediately start your test for up to 100 users (no need to talk to anyone)
  • Select from 20+ languages and customize the phishing test template based on your environment
  • Choose the landing page your users see after they click
  • Show users which red flags they missed, or a 404 page
  • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
  • See how your organization compares to others in your industry

Go Phishing Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

Topics: Phishing

Subscribe To Our Blog

Anti-Phishing Guide ebook

Get the latest about social engineering

Subscribe to CyberheistNews