Ucjenjivačke scam poruke elektroničke pošte u posljednje su vrijeme postale veoma unosne zlonamjernim korisnicima. Nova “sextortion” kampanja upravo podiže ljestvicu tako što žrtve navodi na preuzimanje zlonamjernog sadržaja Azorult putem kojega se kasnije preuzima zlonamjerni ransomware sadržaj GandCrab.

“Sextortion” podrazumijeva primanje poruke elektroničke pošte u kojoj stoji da je netko ostvario pristup vašem računalu te prikupljao snimke putem ugrađene kamere. Poruke često sadrže i lozinke koje su korisnici nekada koristili ili još uvijek koriste, a koje su pribavljene u nekom od slučajeva curenja podataka, a sve u svrhu stvaranja dojma legitimnosti.

U porukama stoji kako trebate uplatiti otkupninu ili će snimke završiti na adresama vaših kolega i prijatelja. Sigurnosni stručnjaci napominju kako je riječ o prijevari i kako u većini slučajeva nema straha od kompromitacije računala.

Novu kampanju spazili su stručnjaci iz tvrtke ProofPoint te su preuzeli sadržaj u kojem su se nalazile navodne snimke. Međutim, preuzeta arhiva sadržavala je zlonamjerni sadržaj.

U nastavku prenosimo primjer poruke korištene u kampanji:

Hello!

I have very bad news for you.
09/08/2018 – On this day, I got access to your OS and gained complete control over your system. **@gmail.com
On this day your account **@gmail.com has password: XXXX

How I made it:

In the software of the router, through which you went online, was avulnerability.
I just got into the router and got root rights and put my malicious code on it.
When you went online, my trojan was installed on the OS of your device.

After that, I made a full dump of your (I have all your address book, history of viewing sites, all files, phone numbers and addresses of all your contacts).

A month ago, I wanted to your device and ask for a not big amount of btc to unlock.
But I looked at the sites that you regularly visit, and I was shocked by what I saw!!!
I’m talk you about sites for adults.

I want to say – you are a BIG pervert. Your fantasy is shifted far away from the nromal course!

And i got an idea….
I made a screenshot of the adult sites where you have fun (do you understand what it is about, huh?).
After that, I made a screenshot of your joys (using the camera of your device) and glued them together.
Turned out amazing! You are so spectacular!

As proof of my words, I made a video presentation in Power Point.
And laid out in a private cloud, look You can copy the link below and paste it into the browser.

https://google.com/url?Q=[url here]

I’m know that you would like to show these screenshots to your friends, relatives or colleagues.
I think #381 is a very, very small amount for my silence.
Besides, I have been spying on your for so long, having spect a lot of time!

Ova nova taktika tjera korisnicima strah u kosti te su mnogi od njih spremni preuzeti arhivu samo kako bi se uvjerili u postojanje same snimke. Preuzimanje arhive uzrokuje preuzimanje zlonamjernog sadržaja, a problem što ste imali s nezgodnom porukom postaje problem cijelog računala.