"Belarus Phishing Expedition"

[SlapHappy]

Moderator note: All of the following reports are part of a "phishing expedition," where the scammer has gotten email lists and spams threatening emails out to people, hoping that some will get scared and send them money. The scammers have no other information on the victims, other than their email addresses from every report we have seen so far.

EDIT: 9/2018 We have also seen examples of some emails containing old passwords of email accounts, or telephone numbers. If you are still using that email address, change the email pw or close the account, so you do not get other scam emails or information stolen, as the account is compromised. The scammer does not have any pictures or videos from any websites they mention; it is just a scare tactic to extort money. Do not believe a word they say.

Any victims should report the scammer information here in this topic or go to [ http://blackmailscams.com ] and please include a copy of the email in text form in additional information section of the form. Then, ignore the email, do not click on any links that might be attached, and delete any further emails. Do not pay them. This will result in possible further threats and more scam emails being sent to the victim.

Do not post your own email address, phone number, name or password from the phishng email you post. "XXX" them out or leave those parts blank.


Form received 2017-08-16 04:44:24

What name did the scammer use?: Elijah Jones
Scammer's email address if you have it.: elijah.jones@laua.com
How old did the scammer say they were?: 20
Scammer's Skype name.: N/A
Scammer's Skype username .: N/A
How much money did they demand?: Usd 300
Name you were told to send the money to.: Bitcoin
What country/city were you told to send the money to?: Belarus
How were you to send the money ?: Bitcoin
What steps, if any, have you already taken to block the scammer?: Facebook closed
LinkedIn closed
Passwords changed several places
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: No Skype. Just chaturbate
Blackmailer discovered my work email
States malware installed (cam/keylogger/screen)
Blackmail threat occurred weeks later just after I had logged in from the PC for work

[SlapHappy]

Form received 2017-08-16 10:50:25

What name did the scammer use?: Jackson Brown
Scammer's email address if you have it.: benjy@lentaua.com
Scammer's Skype name.: n/a
Scammer's Skype username .: n/a
Address of the scammer's FaceBook, Google+ or other social media site page.: n/a
What site/app did you first meet the scammer on? .: n/a
If they asked you to leave the site/app , where did they take you to?: n/a
How much money did they demand?: 320 USD
Name you were told to send the money to.: Bitcoin account
What country/city were you told to send the money to?: Bitcoin account
What steps, if any, have you already taken to block the scammer?: deactivated facebook - although only contacted by email
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: distributing tomorrow - ive just ignored

[Wayne]

Form received 2017-08-16 23:00:03

What name did the scammer use?: Zoe Davis
Scammer's email address if you have it.: kris@lentaua.com

Scammer's Skype name.: N/A
Scammer's Skype username .: N/A
Address of the scammer's FaceBook, Google+ or other social media site page.: N/A
What site/app did you first meet the scammer on? .: randomly contacted via email
If they asked you to leave the site/app , where did they take you to?: N/A
How much money did they demand?: 300 USD
Name you were told to send the money to.: bitcoin
What country/city were you told to send the money to?: they claimed to be from Belarus
If they gave you a phone number, please add it here.: N/A
If they posted your video on a website, please include the link.: N/A
How were you to send the money ?: bitcoin
What steps, if any, have you already taken to block the scammer?: Deactivated FB although they've only contacted me through my work email
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: Multiple people with the same work email received similar messages today, threatening the same thing. The email was that they had installed malware on our computer after clicking a video on an adult website that allowed them access to our cams which reportedly included sensitive video of ourselves (no proof provided), which was going to be distributed the following day

[Wayne]

Form received 2017-08-18 13:43:21

What name did the scammer use?: Ryan Adams
Scammer's email address if you have it.: john@lentaua.com

Scammer's Skype name.: N/A
Scammer's Skype username .: N/A
How much money did they demand?: 290 USD
How were you to send the money ?: Bitcoin wallet address - 15DCRsD8K7Pon25sQow5fgnwLy4bYV45zg
What steps, if any, have you already taken to block the scammer?: None
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: Just received email from server john2.lentaua.com [188.225.37.114] saying my computer had downloaded a virus from a porn site and a rdp with keylogger function has taken screenshots and that they have made a split screen video whilst I was watching an adult site and they will send it to all of my contacts unless he gets btc. My webcam is taped over.

[Wayne]

Form received 2017-08-21 15:45:29

What name did the scammer use?: Emma Rodriguez
Scammer's email address if you have it.: flo@budmastera.com

Scammer's Skype name.: n/a
Scammer's Skype username .: n/a
What site/app did you first meet the scammer on? .: email
How much money did they demand?: 310 bitcoin
How were you to send the money ?: BTC wallet address- 1P2Udy325s2WfHCXYhftJj1SRPBRopbc29
What steps, if any, have you already taken to block the scammer?: I received this email at my work email address. At work, we have a "Report Fishing" plugin in our Outlook, so I instantly forwarded it along to the tech group.
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: I have used Omegle on occasion and am afraid that the scammer may have recorded me there, although their message did not say that. They said they found me because I "surfed the internet with porn."

[Wayne]

Form received 2017-08-23 16:28:32

What name did the scammer use?: Emma Guilson
Scammer's email address if you have it.: office@qigongqueen.com

How old did the scammer say they were?: 25
Scammer's Skype name.: We did not talk on Skype.
Scammer's Skype username .: We did not talk on Skype.
Address of the scammer's FaceBook, Google+ or other social media site page.: I was not contacted through these means, and I did not see the video.
What site/app did you first meet the scammer on? .: I was contacted directly by email.
If they asked you to leave the site/app , where did they take you to?: Nowhere.
How much money did they demand?: USD 295, by Bitcoin
Name you were told to send the money to.: Bitcoin address: 1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L
What country/city were you told to send the money to?: His Bitcoin wallet: 1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L
If they gave you a phone number, please add it here.: N/A
If they posted your video on a website, please include the link.: N/A
How were you to send the money ?: I did not send any money.
What steps, if any, have you already taken to block the scammer?: He send the email to my work email address. So I haven't do anything, and don't know what to do.
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: This is what I received.

Hello.

I do not presume to judge you, but eventually of several cases, we have touchpoint from now. I do not think that caress oneself is very amiss, but when all your relatives, colleagues and friend see it- its obviously awful.

So, what am I implying? You surfed the internet with роrn, which I’ve adjusted with the deleterious soft. Then you chose video, virus started working and your device became acting as dedicated desktop since that moment. Naturally, all cams and screen started recording immediately and then my soft collected all contacts from your device.

I text you on this e-mail address, because I got it it from your device, and I make no doubt you for sure control this work e-mail.

The most important thing that I created video, on one side it shows your screen record, on second side your cams record. Its very funny. But it wasn’t so easy .

As a result- if you want me to delete all this compromising evidence, here is my Bitcoin wallet address- 1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L (it must be without «spaces» or «=aquo;,check it). If you do not know how to make btc transactions, you can ask google or youtube for help- its very easy. I suggest, that 295 usd will finish your problem and will destroy our point of contact . You have one day after reading this message(I put tracking pixel in it, ill know when you open it). If you will not pay me, ill share the compromising with all contacts I’ve collected from you.

Finally, you can ask police for help, but, obviously, they will not find me for 1 day, so you will be shamed at all. Sorry for misprints, I am foreign.
If you sent money via money transfer, please provide the transaction number. This can help in getting the scammer arrested.: Bitcoin wallet address: 1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L

[Concerned]

What name did the scammer use?: Carter Young
Scammer's email address if you have it.: community@lubovanie.com

How old did the scammer say they were?: na
Scammer's Skype name.: na
Scammer's Skype username .: na
Address of the scammer's FaceBook, Google+ or other social media site page.: I was not contacted through these means, and I did not see the video.
What site/app did you first meet the scammer on? .: I was contacted directly by email.
If they asked you to leave the site/app , where did they take you to?: Nowhere.
How much money did they demand?: USD 290, by Bitcoin
Name you were told to send the money to.: Bitcoin address: 1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L
What country/city were you told to send the money to?: His Bitcoin wallet: 1E36zCkWiT5EZZMXUguLUo23WcDAPsSQ6n
If they gave you a phone number, please add it here.: N/A
If they posted your video on a website, please include the link.: N/A
How were you to send the money ?: Bitcoin but I did not send any money.
What steps, if any, have you already taken to block the scammer?: He send the email to my work email address. So I blocked his email address. I did not reply or open, previewed in window only.
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: This is what I received by email on August 31, 2017. Really messed me up. But from what i can see on the forum, this is only a scam to get money with no action taken by the scammer.

Whats up.
I do not presume to judge you, but eventually of some cases, we have touchpoint since now. I do not
think that caress oneself is very ill, but when all your acquaintances see it- its obviously bad.

So, what am I implying? You surfed the website with роrn, which I’ve placed with the virus. Then
you clicked on a video, virus started working and your device became acting as rdp immediately.
Obviously, all cams and screen started recording instantly and then my virus collected all contacts
from your device.

I message you on this e-mail address, because I’ve collected it with my soft, and I guess you for
sure check this work e-mail.

The most important thing that I created video, on one side it shows your screen record, on another
side your cams record. Its very amusingly. But it wasn’t so easy ,so I proud of it.

Eventually- if you want me to delete all this compromising evidence, here is my BTC wallet address-
1E36zCkWiT5EZZMXUguLUo23WcDAPsSQ6n (it must be without «spaces» or «=aquo;,check it). If you do not
know how to make btc transactions, you can ask google or youtube for advice- its very easy. I
suggest, that 290 usd will solve your problem and will destroy our point of contact forever. You
have thirty hours after opening this letter(I put tracking pixel in it, ill know when you read it).
If you will not pay me, ill share the compromising with all contacts I’ve collected from you.

I do not think that cops can find me for only one day(not even 10 days), so think twice, you can
lose your honor.
Sorry for misprints, I am foreign.

[SlapHappy]

Concerned,
Make sure to go to http://blackmailscams.com to get the latest steps to protect yourself after filling a form.
It is a phishing type attempt, yes. But even in looking at preview pane, scammer may know you looked at it and continue to try to scam you.

[SlapHappy]

Form received 2017-09-06 18:18:10

What name did the scammer use?: Abigail Hernancez
Scammer's email address if you have it.: international@qigongqueen.com
Scammer's Skype name.: Didn't tell
Scammer's Skype username .: Didn't tell
Address of the scammer's FaceBook, Google+ or other social media site page.: Didn't tell
What site/app did you first meet the scammer on? .: Received an email only.
How much money did they demand?: 295 USD
How were you to send the money ?: Bitcoin 1G2f1AxzX6jX6LUnn9niU3xx62KRpJhbK8
What steps, if any, have you already taken to block the scammer?: Blocked FB and all other social medias. Changed PWs in general.
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: Received this email:

Hello.

I do not presume to judge anyone, but as a result of several occasions, we have touchpoint since now. I do not think that caress oneself is very ill, but when all your acquaintances see it- its definitely bad.

So, closer to the point. You surfed the website with роrn, which I've adjusted with the deleterious soft. After you clicked on a video, virus started working and your device became acting as rdp immediately. Naturally, all cams and screen started recording immediately and then my virus collected all contacts from your device.

I message you on this e-mail address, cuz I've collected it with my soft, and I make no doubt you for sure control this work address.

The most interesting point that I created video, on one side it shows your screen record, on another your cams record. Its very funny. But it wasn't so easy ,so I proud of it.

All in all- if you want me to delete all this compromising evidence, here is my Bitcoin wallet address- 1G2f1AxzX6jX6LUnn9niU3xx62KRpJhbK8 (it should be without «spaces» or «=»,check it). If you do not know how to make btc transactions, you can ask google or youtube for tips- its very easy. It seems to me, that 295 usd will finish your problem and will destroy our touchpoint forever. You have thirty hours after opening this letter(I put tracking pixel in it, ill know when you open it). If you will not pay me, ill share the evidence with all contacts I've collected from you.

Finally, you can ask police for help, but, obviously, they will not find me for 1 day, so you will be shamed at all. Sorry for misprints, I am foreign.

[SlapHappy]

Form received 2017-09-06 20:58:46

What name did the scammer use?: Grace Moore
Scammer's email address if you have it.: careers@qigongqueen.com
Scammer's Skype name.: None
Scammer's Skype username .: None
Address of the scammer's FaceBook, Google+ or other social media site page.: None
What site/app did you first meet the scammer on? .: Do not know
If they asked you to leave the site/app , where did they take you to?: None
How much money did they demand?: 310 usd
Name you were told to send the money to.: None
What country/city were you told to send the money to?: None
If they gave you a phone number, please add it here.: None
If they posted your video on a website, please include the link.: None yet
How were you to send the money ?: Bitcoin
What steps, if any, have you already taken to block the scammer?: Blocked email address on gmail and work accounts
Are there any other details you wish to share? Anything you say may help prevent someone else from being scammed.: None tag I know of