In the last few days, there has been an increase in the number of fake ransom messages in which the attacker attempts to extort financial gain from the victim, warned MUP and the national CERT on Tuesday – an organizational entity that responds to computer security incidents and works on improving the cybersecurity of information systems through preventive actions.
>>>Half a billion people unknowingly mine cryptocurrencies
The method by which the attacker attempts to achieve financial gain is based on publishing alleged sensitive data of the victim who received the ransom message if the victim does not make a payment in Bitcoin value.
Almost always in the text of the message, the extortionist mentions possessing the victim’s compromised password for some online service. They also claim to have recordings from the victim’s computer webcam, which they accessed while the victim was allegedly browsing pornographic websites. They threaten to publish the alleged “humiliating” video to all of the victim’s contacts that they have collected from Messenger, Facebook, and email.
Although it may happen that the message contains a password that you may use or have used, this is likely due to the fact that there are certain services with a database of compromised passwords (for example, the now-defunct Leakedsource.com) from which the extortionist has obtained the database of compromised data. There are known cases of compromised accounts from popular web services LinkedIn and MySpace, the national CERT reported on its website.
Advice to avoid any future inconveniences or possible compromises
This national body for the prevention and protection against computer threats advises email users to change existing passwords and to use different, stronger passwords for each individual online service.
>>>How to protect yourself from cyber attacks?
Additionally, one should always be cautious about whom they send confidential messages containing image or video content,
Email users should also be cautious when opening attachments received from unknown senders.
If you do not intend to use the webcam, make sure it is turned off before browsing online content, advises the national CERT, which has also published examples of extortionist “scam” messages on its website.
MUP: Increased reports from citizens observed
MUP has also reported that in the last few days, there has been an increase in the number of reports from citizens who receive messages via email in which the sender claims that their email account and computer have been compromised and that they have obtained access to the user password mentioned in the message. The password may be correct, but it may not be, or it may be an old password that the user no longer uses.
The perpetrator in their message states that they have installed malicious software on the victim’s computer that has allowed them access to the camera and user data, and in this way, they have obtained explicit content of the victim while they were allegedly browsing pornographic websites, MUP states, adding that based on the alleged explicit content, the perpetrator is extorting the victim with the threat that if the victim does not pay a certain amount to the perpetrator’s bitcoin account, all compromising content will be sent to the victim’s Facebook/Messenger friends, as well as to people from the email address book, etc.
>>>Cyber wars have just begun
MUP advises email users not to open suspicious attachments in messages from unknown senders as such attachments may contain malicious programs, to be cautious when sending confidential messages that contain image or video content, and to check that the webcam is turned off if it is not needed while browsing online content.
MUP also advises users to update their access passwords using a stronger security password for each individual online service, to avoid sharing their passwords and email accounts with other people or services, and to install and regularly update antivirus programs and operating systems.
