Envelope-to: lojban@lojban.org
Delivery-date: Wed, 17 Apr 2024 11:11:34 -0700
Message-ID: <87e78229dd1933381f753c976b4f647a4cada5@daum.net>
From: info1@daum.net
To: bugs@teddyb.org
Subject: 
Date: Wed, 17 Apr 2024 21:11:20 +0300
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam_score: 3.2
X-Spam_score_int: 32
X-Spam_bar: +++
X-Spam-Report: Spam detection software, running on the system "stodi.digitalkingdom.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 
 Content preview:  Well, hello there, my perverted friend. I'll get right to
   the point. We've actually known each other for a while now, at least I've
   known you. You can call me Big Brother or the All-Seeing Eye. I'm a [...] 
 
 Content analysis details:   (3.2 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [89.113.146.153 listed in zen.spamhaus.org]
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                             high trust
                             [89.113.146.153 listed in list.dnswl.org]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [info1[at]daum.net]
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [info1[at]daum.net]
  0.7 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  0.8 BITCOIN_DEADLINE       BitCoin with a deadline
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  2.4 BITCOIN_MALWARE        BitCoin + malware bragging
  1.5 MALWARE_NORDNS         Malware bragging + no rDNS
  0.0 SPOOFED_FREEMAIL       No description available.
  1.0 BITCOIN_SPAM_05        BitCoin spam pattern 05
  2.2 BITCOIN_ONAN           BitCoin + [censored]
X-Spam-Score: 2.7 (++)
X-Spam_score: 2.7
X-Spam_score_int: 27
X-Spam_bar: ++
X-Spam-Report: Spam detection software, running on the system "50bab00d4276",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 @@CONTACT_ADDRESS@@ for details.
 
 Content preview:  Well, hello there, my perverted friend. I'll get right to
   the point. We've actually known each other for a while now, at least I've
   known you. You can call me Big Brother or the All-Seeing Eye. I'm a [...] 
 
 Content analysis details:   (2.7 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: evolutionlab.org]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: evolutionlab.org]
 -5.0 RCVD_IN_DNSWL_HI       RBL: Sender listed at https://www.dnswl.org/,
                             high trust
                             [89.113.146.153 listed in list.dnswl.org]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [89.113.146.153 listed in zen.spamhaus.org]
  0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage
                             of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URIs: evolutionlab.org]
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5000]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [info1[at]daum.net]
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [info1[at]daum.net]
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.7 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  3.0 BITCOIN_DEADLINE       BitCoin with a deadline
  0.7 MALWARE_NORDNS         Malware bragging + no rDNS
  1.0 BITCOIN_ONAN           BitCoin + [censored]

Well, hello there, my perverted friend.
I'll get right to the point.
We've actually known each other for a while now, at least I've known you.
You can call me Big Brother or the All-Seeing Eye.
I'm a hacker who a few months ago gained access to your device, including your browser history and webcam.
And I recorded some videos of you jerking off to highly controversial "adult" videos.
I doubt very much you'd want your family, coworkers, and your entire contact list to see footage
of you pleasuring yourself, especially given the specifics of your favorite genre.
I'll also put these videos on porn sites, and they'll go viral, so much so that it will be physically impossible to remove them from everywhere.

How did I do that?
Because of your disregard for Internet security, I was able to easily install a Trojan horse on your device.
which accessed all the data on your device and allowed me to control it remotely.
Once I infected one device, I had no problem accessing all the other devices.
My spyware is embedded in the drivers and updates its signature every few hours, so no antivirus or firewall can even detect it.
So now I'm just gonna give you a condition. A small sum in exchange for your former quiet life.
Transfer 1200 USD to my bitcoin wallet:
3E5kH22Z5ozUhfqg3emYDQ9oDy1frgq3mr
As soon as I receive confirmation of the transfer, I will delete all the videos that compromise you, remotely erase the virus on your devices and you will never hear from me again.
Agree, it's a very small price to pay for not destroying your reputation in the eyes of others who, judging by your correspondence in messengers,
has an opinion of you as a decent human being.
You can think of me as a kind of mentor who wants you to start appreciating what you have.
You have 48 hours - I'll be notified as soon as you open this letter, and from then on it's a countdown.
If you've never dealt with cryptocurrency before, it's super easy - type "crypto exchange" into a search engine, and the next thing to do.
Here's what you shouldn't do:
Don't reply to my email. It was sent from a disposable e-mail account.
Don't call law enforcement. Remember, I have access to all of your devices, and as soon as I notice such activity, it will automatically lead to the release of all of your data.
Do not attempt to reinstall your system or factory reset your device.
First of all, I already have the video and all your data, and secondly, as I already said, I have remote access to all your devices and as soon as I notice such an attempt, it will lead to irreversible consequences.
Remember that crypto-addresses are anonymous, so you won't be able to figure me out from my wallet.
Anyway, let's make this a win-win situation.
I always keep my word, unless I'm being tricked. 
Advice for the future: take more seriously your security on the Internet. Also regularly change passwords and set up multi-factor authorization on all your accounts.