What is the “I actually installed a Malware on porn website” email scam?

“I actually installed a Malware on porn website” is a scam email that falls into the sextortion email category. The email falsy claims that the recipient’s computer is infected with malware, which allowed them to turn on the microphone/camera and make an explicit video of the recipient watching pornography. The contents of the email are completely false. The email is nothing more than a scam.

 

 

“I actually installed a Malware on porn website” is a classic example of a sextortion scam email. It uses the usual scare tactics to alarm recipients and threatens them with the same things. These types of sextortion emails have been going around for years, usually targeting users whose email addresses have been leaked. While they may be operated by different cybercriminal groups, they’re all more or less identical to one another. If users have seen one sextortion scam email, they will have seen them all.

This “I actually installed a Malware on porn website” sextortion email starts by explaining that the malware was installed on an adult website the recipient visited. The sender explains in a very nonsensical way that the malware granted them access to the recipient’s device, which allowed them to turn on the camera and steal all the data on the computer. The sender claims to have made a video of the recipient watching pornography and threatens to send it to all contacts. They demand a payment of $950 in Bitcoin in exchange for not releasing the video. A wallet address and a QR code are provided.

The scammer tries to make the recipient feel ashamed by using mocking language and saying things like “It will not help you avoid the humiliation your self will have to feel when relatives and buddies uncover your dirty videotape”. This is an effective scare tactic and may work even if users have never visited a pornographic website. The thought that their contacts would receive an explicit video associated in any way with them may be enough to pressure users into paying.

It goes without saying that paying would be a complete waste of money. Users’ computers are not infected with malware and there’s no explicit video of them. This is merely a scam email.

The full text from the “I actually installed a Malware on porn website” is below:

I know, – is too personal to contact you.

I won’t beat around the bush. You do not know anything about me but I know you and you must be thinking why you’re receiving this mail, correct?

I actually installed a Malware on porn website & do you know what, you accessed same porn web site to have fun (you know what I mean). And while you were busy enjoying those videos, your internet browser started out operating as RDP (Remote Protocol) with a keylogger which provided me access to your display and your camera access. After that, the malware gathered all of your data and every one of your contacts from device including every one of your photos.

What have I done?

It is just your misfortune that I discovered your blunder. Later I invested in more time than I probably should have investigating into your life and created a split-screen video. First part shows the video you were watching and 2nd half displays the video of your web cam (it is someone doing naughty things). As a family man, I am ready to delete everything about you and allow you to continue with your regular life. And I am going to provide you two options that may accomplish your freedom. These two options are either to turn a blind eye to this message (not recommended), or pay me a small amount.

What exactly should you do?
Let’s explore above two options in more detail. First Choice is to turn a deaf ear my mail. Let us see what will happen if you choose this option. I will send your sextape to all of your contacts including family members, colleagues, etc. It will not help you avoid the humiliation your self will have to feel when relatives and buddies uncover your dirty videotape. Second Option is to pay me, and be confidential about it. We’ll call this “keep the secret tip”. Lets discuss what will happen when you go with this option. Your naughty secret Will remain private. I’ll keep my mouth closed. Once you make the payment, I will let you move on with your life and family that nothing ever occurred. You’ll make the transfer through Bitcoins.

Amount to be sent: $950
BTC ADDERSS IS 1HT4jMEmjVNga3411xVgFhB2xmdrG1j2En

Notice: You now have 12 hours to transfer the amount. (I have a unique pixel within this email and right now I know that you have read through this e mail). The method to acquire bitcoin usually takes some effort so do not delay. If I don’t get the Bitcoin, I will, no doubt, send your video recording to all of your contacts including close relatives, co-workers, and many others. nevertheless, if I do get paid, I’ll destroy the videotape immediately. If you want to have proof, reply

Users whose email addresses are leaked are likely to receive sextortion emails

Scammers regularly launch massive sextortion scam email campaigns, and users whose email addresses have been leaked are usually the targets. Malicious actors buy email addresses from various hacker forums, where they end up on after companies leak them or suffer a cyberattack. Once an email address has been leaked, there’s not much users can do but at least they can be cautious with unsolicited emails in the future. Users can check whether their email address has been leaked on haveibeenpwned.