2023-06-14 17:31:25 +00:00
{
"type" : "bundle" ,
"id" : "bundle--5bc04e41-a054-4315-ba69-3686950d210f" ,
"objects" : [
{
"type" : "identity" ,
"spec_version" : "2.1" ,
"id" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-13T14:04:31.000Z" ,
"modified" : "2018-10-13T14:04:31.000Z" ,
"name" : "CIRCL" ,
"identity_class" : "organization"
} ,
{
"type" : "grouping" ,
"spec_version" : "2.1" ,
"id" : "grouping--5bc04e41-a054-4315-ba69-3686950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-13T14:04:31.000Z" ,
"modified" : "2018-10-13T14:04:31.000Z" ,
"name" : "OSINT - New Sextortion Scam Pretends to Come from Your Hacked Email Account" ,
"context" : "suspicious-activity" ,
"object_refs" : [
"observed-data--5bc04f34-d078-405a-ad5f-1b53950d210f" ,
"url--5bc04f34-d078-405a-ad5f-1b53950d210f" ,
"observed-data--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"file--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"artifact--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"observed-data--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"file--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"artifact--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"x-misp-attribute--5bc054b9-7080-4bad-95cc-54b3950d210f"
] ,
"labels" : [
"Threat-Report" ,
"misp:tool=\"MISP-STIX-Converter\"" ,
"osint:source-type=\"blog-post\"" ,
"circl:incident-classification=\"scam\"" ,
"veris:action:social:variety=\"Scam\"" ,
"riskiq:threat-type=\"scam\"" ,
"riskiq:threat-name=\"scam-scareware\"" ,
"veris:action:social:variety=\"Extortion\"" ,
"workflow:todo=\"add-tagging\"" ,
"workflow:todo=\"review\""
] ,
"object_marking_refs" : [
"marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
]
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5bc04f34-d078-405a-ad5f-1b53950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-12T08:02:05.000Z" ,
"modified" : "2018-10-12T08:02:05.000Z" ,
"first_observed" : "2018-10-12T08:02:05Z" ,
"last_observed" : "2018-10-12T08:02:05Z" ,
"number_observed" : 1 ,
"object_refs" : [
"url--5bc04f34-d078-405a-ad5f-1b53950d210f"
] ,
"labels" : [
"misp:type=\"link\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
]
} ,
{
"type" : "url" ,
"spec_version" : "2.1" ,
"id" : "url--5bc04f34-d078-405a-ad5f-1b53950d210f" ,
"value" : "https://www.bleepingcomputer.com/news/security/new-sextortion-scam-pretends-to-come-from-your-hacked-email-account/"
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-12T07:52:35.000Z" ,
"modified" : "2018-10-12T07:52:35.000Z" ,
"first_observed" : "2018-10-12T07:52:35Z" ,
"last_observed" : "2018-10-12T07:52:35Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"artifact--5bc052c3-71b0-4475-b539-4a31950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"Payload delivery\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"name" : "dutch-version.jpg" ,
"content_ref" : "artifact--5bc052c3-71b0-4475-b539-4a31950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5bc052c3-71b0-4475-b539-4a31950d210f" ,
"payload_bin" : " / 9 j / 4 A A Q S k Z J R g A B A Q A A A Q A B A A D / 2 w B D A A U D B A Q E A w U E B A Q F B Q U G B w w I B w c H B w 8 L C w k M E Q 8 S E h E P E R E T F h w X E x Q a F R E R G C E Y G h 0 d H x 8 f E x c i J C I e J B w e H x 7 / 2 w B D A Q U F B Q c G B w 4 I C A 4 e F B E U H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 4 e H h 7 / w g A R C A K g A q Y D A S I A A h E B A x E B / 8 Q A G w A B A A M B A Q E B A A A A A A A A A A A A A A Q F B g M C A Q f / x A A U A Q E A A A A A A A A A A A A A A A A A A A A A / 9 o A D A M B A A I Q A x A A A A H 9 W K Y u V V 5 L d R S C 1 U t y f Q A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A M Z s + Z k 2 t 5 G J 0 F v 0 M d c W f M m g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A U N 9 S l d q s X t D C a W H G L G T W V x r K + R T H b S / m f 6 M Z v r X z T R 5 + 2 w R s f m d k l h o a a 9 M V d V 8 g 9 V E u E a L r n J 5 Y w J Y m Q / s I j 9 + O b P 0 / O 32 V L K P W y D v 2 k 4 w 1 / 2 H Y k 2 n m U 5 O i 2 X k 90 P v 0 W M f n 8 L n n P r C B q M b s j P y c 1 J N V R W N C X d d X d y z 7 + 4 B L i R Z Z 64 + J R e Z P a U x 850 f k k a P P 2 x 7 q Z U c 6 W F L 1 L B E n l y A A A A A A e D 2 c z o 8 e x A n + D 2 A A A A B A n h A n + D 2 A A e D 2 B m 9 I O X X n 0 A A A A B z O g A E a S O P Y I l Z d d A A A A A A A A A A A e D 2 A 8 e w A B m 9 J V F L P k 151 r 5 f E g W k K U d 5 c a e e a / z K I / L 1 Z n e j t a Y k w Z c Q m 2 f k V E q a I P P 7 D L X x 88 l f r a m e Q 4 v G y I l h z r D 3 Y V f w t a + x H q u n 1 h 6 r L C v L W a 9 H i J 2 j H i L 3 l k 7 L 3 F I X s C 26 l U 5 + z p y t v p B r Z 0 I 1 + X 0 u Y J y F K L O g u q Y 8 y Y N k e r P j z K u f W z S R H 6 d y h u + A 6 T I F m Q o k W Y R o 0 r w S 5 M W I R 53 r 6 S b 7 O 3 J J A O B 3 A R / p 3 A O B 3 A c P p 2 A A O J 2 A i d O 4 O B 3 A A e P h 0 A A A c O 4 A A A O J 2 R / R 2 P B 7 Q 5 g A B x 7 A A A 49 o J N + u J 2 A A A V v I t w A A A A K G + r T M W 0 q M Q J P v u Z e 8 k 2 B x d q 4 y 2 / o 9 G Z C X b 1 x W + L r y T a / Q V 5 C q 9 F W l V K t Z B X x 7 K E U v e 17 D G b a C e 1 l y K P R 0 W j M 7E00 U r O F v 1 M T + m 5 r T m G l e p p S T r K W Z j X 0 u j M j N i S z x J 5 z j j R 6 G r N B k d f l j v H s Z p w y 2 y g H y n t p J S R 9 H y L r H a + v K X x 2 n F V 7 u Y h 8 i z f h F 53 v 0 x N 12 n k L S 13 Q o 7 H j 9 M Z q / F q R L 6 s s w A A A e D 2 A 4 d w B z 6 A 4 d w A A A A q L U 9 O H c A I c w A E Y k o k s E M m O H c A P H s A A A A A A A A H g 9 g I 3 c 9 A A A A A A A A A A A Z D X w S k 4 a K n O H b x N K v h c z C y y O v p D x D u x X V E + U e u M 6 m P W a u r A q + 130 M r p e 0 0 q s T s e J o M x r M 8 U f n R f S x p t N S F b w s u 54 x v 6 D U H H l b c i D G t c k W 1 t J l l B 1 u 4 R V 0 e y i H i P H k E a d 4 u y p i 6 P A G 2 y u v i F P J t J Z 0 z m q z J 7 + T P Z m J 113 K V d 15 V e L v 2 V 0 y W K r j Z f T P S L v 6 f K n V V 5 n K f c Q T x J s h O A A A A A A A A A O J 2 f P o A I p K Q J 4 Q v J P A A K 8 s A A A A A A D g d y s L N m b 4 k O H A n A A F e W D h 3 A C B P D h 3 C p t g A r + h M A A A c O 4 A A A A A A y e s p i p 538 Q r 4 m v G R k y J Z 8 z m k 7 G b 7 a a M V m r q r E y t b p e x 0 x 36 B U m e k X U s 8 U t 7 F K q n 13 Y o O d 3 y M V e W s 8 l Z b Y U R n J c 7 s Q f E u z M t N l W 5 Q r n w U E L Q z S f S W n k h x u l q Z u d b f T O c 9 P W F H e T K 4 h 9 p k o i 0 + q + F f X 6 C E U k X U V x W b a H P M D f S p R X U + q q T 5 n N z E K G v 1 s Q t 8 r t s 2 Q O 8 m W e M 9 o O 5 X 6 W v s A A A A A A R i S 8 c z u p r U 6 O P k k I v o k I 3 g m I / 0 7 o 3 c 9 K 7 s S 0 Y S X j y d X L i S y I S 0 a S E X 2 d 3 H w S U f 4 S X P y d k W U E Y S X j y d U T 4 T H E d n D y S W Z v S S + R y S j d j 2 r p p 0 Q / Z J c + B L R J B 7 c P J J V V g d U T g W T n y J K u k E l G 6 n R E 9 E l G E l 4 p y 7 c f p 1 c e w A x W 1 p y h u p 3 k y f j a 8 j O 9 b u S Y W 3 v 8 A q c M 9 r I x n a r W S C j 1 H P 0 U N R c X J g 7 y d a F J V 6 / g Z u D s O p I w m 7 q D N 6 j n d G U 9 T 5 B m u G v 6 l B S b 2 A Z e 0 v O x m L T p b H 53 e T r Q p P F 99 M p H 2 X E o J d k M p 211 W Q O e m r z L T 9 V X F d 3 u x n O G r 4 m X l T 7 Q p e t r 9 M x C 2 c U z r Q x i B x 1 I x M u 1 t D J x t n A K m j / R a s r 5 V 0 K + p u B S d 7 G x M V 72 F S U n v U e S N d e P Y A K w s 1 F 8 L 5 n t A f V H N J 6 n 9 l q g R i 4 V s o k K / i W y k u D 2 r e x M U d 4 F P y L 1 U S i a z 9 g W C H A L t D i l s z / Y u j K G r R 4 Z a K L 6 X j j 2 A A A A A A A A A A A A A A A A A A A A A A G U 1 c c x P r b 8 S r v 8 A x z M d d T O Z F 9 X Y x E X 9 B 4 F R B 1 n k y v 3 V 8 S n 63 I z M X W 8 j I 6 v n Z G O p / w B A 6 m F 1 s j u Z X 3 p P h k f O y 5 G W 9 X E Y j Z j 9 O 4 H f F b i G Y S x 2 s c o Y G y 8 H m T 49 g A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A g k 5 G k g 8 H s B 49 h x 6 n 0 A B 59 A A A A A A A 8 H s A A A A A A B 4 + H Q A A A A A A A A A A A B z + n s 8 H s B 59 A A A C n u M q S o / T g a b C 7 u h H P n 2 K j Y 5 T U l J I 8 C 3 o L u g L D x 8 H D Q 53 U m N l + u Q 6 x f Z 5 s a G 5 P t b P 8 A Z 34 c u B e 0 l l Q E 7 j 97 F r A l f T O 3 d D b H W q k w i 47 f Z B D T e B y h y Z x 9 r J 9 c T J C O V W j y + p K 1 z + n P 3 x t S q + y B G 7 x u p H k 9 O R 7 g y 68 s f v q Q I E f o T P s y G U 9 r V a I W 9 L Z F L E t K s 1 G F 3 d C O H z o V m w y u n J g A A A A A B x O x H J A A A A A H L q K W 64 d w C v 8 A U 4 c a 24 A A C v s B B n A O B 3 A O B 3 P J 6 i d u o A I J O R / R 2 A A 4 f Y h Y u P Y A A A I / 0 7 g A A E c k A A A A Y X d Z 8 q I u l 8 k C 59 D l W z v Z G g 2 H g y W q 5 T T z I 5 e C B X + b 4 r O t l N K 6 D e 0 p 25 y e Z D + z p p Y 5 P Y 0 J 7 q r K A d H U e e F 3 U H j 1 y l F z j t 1 R m d 3 N T a m f 59 u x n 7 S f M P D 2 M z s M v q z C 3 / v 4 c 8 l s o R o 87 p s m W / S D 7 K 37 a f S B n t G P n C 66 k G D c 1 Z X d L W w I 8 L r P M L o v s o r J v w Q f V N t y X m N V m D 13 h 2 B M y + r o S J c r I n A A A E M m O P Y I s o A I s o E Q l + a y x O U k A B F J Q D x 7 A C N 3 P Q A P H s A A A A C H M A A C L K H j 50 O f 32 C J L B C J q p t g c D u A 4 d w A i S y J L A 4 c i R 0 A A A A A B n t D X G b m T p p l v N 6 K e 7 + 2 Z n V y P z v X e L Y z c i + E O H d x z N z + d 4 V v q z F J Q b q s K L b 19 u f n 158 l l b w t J 5 l 1 / w C S D E 0 w p 5 s z 2 Y i y s p 5 G h 20 Q i V V / n z U 0 u l p C l i a j w X W P 2 k A x O g 79 C t 9 T 7 A z t F v q o g 6 q F a m L a W I Z i 0 n z D H b W N b G T n x 7 E x m z h 3 J R 5 P W e T R 5 L Y Z k o 5 N z 2 P f K 7 p y q h a G u I X 2 + + l N r c 5 p z D 28 k U f f p O K z r 3 t C c A R i S h T Q A A A g T w A g z g U h d q W 6 D j 1 P o A A C v s A Q S c A A A g T w 8 c C U A A Q C e A A 4 c C c A r 7 A A A H E 7 I E 8 A E Y k u H c A H M 6 P H s A A A A Z 7 Q 0 B U 62 h 0 Z + e 3 l x z K S N o o Z U b K J Z m D 66 T w Z 2 k 30 A r 9 Q h l x i d t X m c r N v E M 5 r + F o f n U j S d T L S r e y K + B f w y l + 3E4 z P m V e H i n u 45 U V m n o T Q 0 e t p T P R d n C L r I 7 O t K S P r u B n O l h E O q 0 7 m e r 9 Z U H P r d i u p d Z y J O X 0 9 W Z 2 D t Y R E h 3 P c q r L v Z F L S 6 n i Z 2 B p J B R d r 2 K W O T 3 G Z I n e 2 + F B z t 7 M o I m m 5 l H a z 68 h Z r 9 G q i q l X X Y l g A E Y k v E Y m O P w 7 u H U 9 I 1 O a F w 9 H V 55 H d F 7 H R H h l o j d D q j Q y 1 R e x 0 c f h 3 R h J c + R J R u x 7 R u p 0 e O R I c P J J e Y x L c O 4 R v J L R / Z 1 c a g v S M S X E d n j y d U b o d U Y S U a O W L h z J b z w J K N V l 64 j s Q y Y q v Z Z I / g l u H Q 9 u V a W 6 n s T u 5 + T s h e S e B l t T w M T 211 W R Y 999 K r 7 f e D N c N B I M n N v / A A V f e 1 i m d i a W x K H l p R j O l 3 O K + l 0 v k z f C + t T
} ,
{
"type" : "observed-data" ,
"spec_version" : "2.1" ,
"id" : "observed-data--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-12T07:53:15.000Z" ,
"modified" : "2018-10-12T07:53:15.000Z" ,
"first_observed" : "2018-10-12T07:53:15Z" ,
"last_observed" : "2018-10-12T07:53:15Z" ,
"number_observed" : 1 ,
"object_refs" : [
"file--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"artifact--5bc052eb-5368-4531-bcaf-4cf7950d210f"
] ,
"labels" : [
"misp:type=\"attachment\"" ,
"misp:category=\"Payload delivery\""
]
} ,
{
"type" : "file" ,
"spec_version" : "2.1" ,
"id" : "file--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"name" : "english-version.jpg" ,
"content_ref" : "artifact--5bc052eb-5368-4531-bcaf-4cf7950d210f"
} ,
{
"type" : "artifact" ,
"spec_version" : "2.1" ,
"id" : "artifact--5bc052eb-5368-4531-bcaf-4cf7950d210f" ,
"payload_bin" : " / 9 j / 4 Q C s R X h p Z g A A S U k q A A g A A A A D A D E B A g A c A A A A M g A A A D I B A g A a A A A A T g A A A G m H B A A B A A A A a A A A A A A A A A B B Z G 9 i Z S B Q a G 90 b 3 N o b 3 A g Q 1 M 1 I F d p b m R v d 3 M A M j A x O C 0 x M C 0 x M V Q x N z o 0 N D o 0 M C 0 w N D o w M A A E A A C Q B w A E A A A A M D I y M A m S A w A B A A A A 4 T Q A A A K g B A A B A A A A Q Q Q A A A O g B A A B A A A A t A E A A A A A A A C 0 A Q A A A A D / 7 A A R R H V j a 3 k A A Q A E A A A A P A A A / + E D 72 h 0 d H A 6 L y 9 u c y 5 h Z G 9 i Z S 5 j b 20 v e G F w L z E u M C 8 A P D 94 c G F j a 2 V 0 I G J l Z 2 l u P S L v u 78 i I G l k P S J X N U 0 w T X B D Z W h p S H p y Z V N 6 T l R j e m t j O W Q i P z 4 g P H g 6 e G 1 w b W V 0 Y S B 4 b W x u c z p 4 P S J h Z G 9 i Z T p u c z p t Z X R h L y I g e D p 4 b X B 0 a z 0 i Q W R v Y m U g W E 1 Q I E N v c m U g N S 4 w L W M w N j A g N j E u M T M 0 N z c 3 L C A y M D E w L z A y L z E y L T E 3 O j M y O j A w I C A g I C A g I C A i P i A 8 c m R m O l J E R i B 4 b W x u c z p y Z G Y 9 I m h 0 d H A 6 L y 93 d 3 c u d z M u b 3 J n L z E 5 O T k v M D I v M j I t c m R m L X N 5 b n R h e C 1 u c y M i P i A 8 c m R m O k R l c 2 N y a X B 0 a W 9 u I H J k Z j p h Y m 91 d D 0 i I i B 4 b W x u c z p 4 b X A 9 I m h 0 d H A 6 L y 9 u c y 5 h Z G 9 i Z S 5 j b 20 v e G F w L z E u M C 8 i I H h t b G 5 z O m R j P S J o d H R w O i 8 v c H V y b C 5 v c m c v Z G M v Z W x l b W V u d H M v M S 4 x L y I g e G 1 s b n M 6 e G 1 w T U 0 9 I m h 0 d H A 6 L y 9 u c y 5 h Z G 9 i Z S 5 j b 20 v e G F w L z E u M C 9 t b S 8 i I H h t b G 5 z O n N 0 U m V m P S J o d H R w O i 8 v b n M u Y W R v Y m U u Y 29 t L 3 h h c C 8 x L j A v c 1 R 5 c G U v U m V z b 3 V y Y 2 V S Z W Y j I i B 4 b X A 6 Q 3 J l Y X R v c l R v b 2 w 9 I k F k b 2 J l I F B o b 3 R v c 2 h v c C B D U z U g V 2 l u Z G 93 c y I g e G 1 w O k N y Z W F 0 Z U R h d G U 9 I j I w M T g t M T A t M T F U M D k 6 M z Y 6 N T Y t M D Q 6 M D A i I H h t c D p N b 2 R p Z n l E Y X R l P S I y M D E 4 L T E w L T E x V D E 3 O j Q 0 O j Q w L T A 0 O j A w I i B 4 b X A 6 T W V 0 Y W R h d G F E Y X R l P S I y M D E 4 L T E w L T E x V D E 3 O j Q 0 O j Q w L T A 0 O j A w I i B k Y z p m b 3 J t Y X Q 9 I m l t Y W d l L 2 p w Z W c i I H h t c E 1 N O k l u c 3 R h b m N l S U Q 9 I n h t c C 5 p a W Q 6 R E I 1 Q z R E Q j d D R D l F M T F F O E E y M 0 N D N U I w N k E y N D R F N j E i I H h t c E 1 N O k R v Y 3 V t Z W 50 S U Q 9 I n h t c C 5 k a W Q 6 R E I 1 Q z R E Q j h D R D l F M T F F O E E y M 0 N D N U I w N k E y N D R F N j E i P i A 8 e G 1 w T U 0 6 R G V y a X Z l Z E Z y b 20 g c 3 R S Z W Y 6 a W 5 z d G F u Y 2 V J R D 0 i e G 1 w L m l p Z D p E Q j V D N E R C N U N E O U U x M U U 4 Q T I z Q 0 M 1 Q j A 2 Q T I 0 N E U 2 M S I g c 3 R S Z W Y 6 Z G 9 j d W 1 l b n R J R D 0 i e G 1 w L m R p Z D p E Q j V D N E R C N k N E O U U x M U U 4 Q T I z Q 0 M 1 Q j A 2 Q T I 0 N E U 2 M S I v P i A 8 L 3 J k Z j p E Z X N j c m l w d G l v b j 4 g P C 9 y Z G Y 6 U k R G P i A 8 L 3 g 6 e G 1 w b W V 0 Y T 4 g P D 94 c G F j a 2 V 0 I G V u Z D 0 i c i I / P v / i C X R J Q 0 N f U F J P R k l M R Q A B A Q A A C W Q A A A A A A g A A A G 1 u d H J S R 0 I g W F l a I A f U A A w A F w A J A A E A C W F j c 3 B N U 0 Z U A A A A A F N F Q y B G U E Q g A A A A A A A A A A A A A A A B A A D 21 Q A B A A A A A N M s U 0 V D I A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A D W N w c n Q A A A E g A A A A O G R l c 2 M A A A F Y A A A A g G R t b m Q A A A H Y A A A A e m R t Z G Q A A A J U A A A A Y n J Y W V o A A A K 4 A A A A F G d Y W V o A A A L M A A A A F G J Y W V o A A A L g A A A A F H d 0 c H Q A A A L 0 A A A A F H J U U k M A A A M I A A A C D G d U U k M A A A U U A A A C D G J U U k M A A A c g A A A C D G N h b H Q A A A k s A A A A F H Z p Z X c A A A l A A A A A J H R l e H Q A A A A A Q 29 w e X J p Z 2 h 0 I C h j K S A y M D A z I F N h b X N 1 b m c g R W x l Y 3 R y b 25 p Y 3 M g Q 28 u L C B M d G Q A Z G V z Y w A A A A A A A A A k U 2 F t c 3 V u Z y A t I E 5 h d H V y Y W w g Q 29 s b 3 I g U H J v I D E u M C B J Q 0 0 A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A B k Z X N j A A A A A A A A A B 1 T Y W 1 z d W 5 n I E V s Z W N 0 c m 9 u a W N z I E N v L i w g T H R k A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A Z G V z Y w A A A A A A A A A F I C A g I A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A A F h Z W i A A A A A A A A B 8 N A A A Q w w A A A H T W F l a I A A A A A A A A F V B A A C k J g A A G F Z Y W V o g A A A A A A A A J W A A A B j R A A C 5 A 1 h Z W i A A A A A A A A D z P g A B A A A A A R Z w Y 3 V y d g A A A A A A A A E A A A A A A A A B A A M A B w A L A B E A G A A g A C k A N A B B A E 4 A X Q B u A I A A l A C p A M A A 2 A D y A Q 0 B K g F J A W k B i w G v A d Q B + w I k A k 8 C e w K p A t k D C g M 9 A 3 I D q Q P i B B w E W Q S X B N c F G Q V d B a I F 6 g Y z B n 4 G y w c a B 2 s H v g g T C G o I w w k d C X o J 2 Q o 5 C p w L A Q t n C 9 A M O g y n D R Y N h g 35 D m 4 O 5 Q 9 e D 9 k Q V h D V E V Y R 2 R J e E u Y T b x P 7 F I k V G R W q F j 8 W 1 R d t G A g Y p B l D G e Q a h x s s G 9 Q c f h 0 p H d c e h x 86 H + 4 g p S F e I h k i 1 y O W J F g l H C X j J q s n d i h D K R I p 5 C q 3 K 44 s Z i 1 A L h 0 u / C / e M M E x p z K Q M 3 o 0 Z z V W N k g 3 P D g y O S o 6 J T s i P C E 9 I z 4 n P y 5 A N k F B Q k 9 D X 0 R x R Y V G n E e 1 S N F J 70 s P T D J N V 0 5 / T 6 l Q 1 V I E U z V U a F W e V t d Y E V l O W o 5 b 0 F 0 U X l t f p G D w Y j 5 j j 2 T i Z j d n j 2 j p a k Z r p W 0 H b m t v 0 n E 7 c q d 0 F X W F d v h 4 b n n m e 2 B 83 X 5 d f 9 + B Y 4 L q h H O F / 4 e O i R + K s o x I j e G P f J E Z k r m U X J Y B l 6 m Z U 5 s A n K + e Y a A V o c y j h q V C p w G o w q q F r E y u F a / g s a 6 z f 7 V S t y i 5 A L r b v L i + m M B 7 w m D E S M Y y y C D K D 8 w B z f b P 7 t H o 0 + X V 5 N f m 2 e r b 8 d 374 A j i F + Q o 5 j 3 o V O p t 7 I n u q P D K 8 u 71 F f c + + W r 7 m f 3 K //9jdXJ2AAAAAAAAAQAAAAAAAAEAAwAHAAsAEQAYACAAKQA0AEEATgBdAG4AgACUAKkAwADYAPIBDQEqAUkBaQGLAa8B1AH7AiQCTwJ7AqkC2QMKAz0DcgOpA+IEHARZBJcE1wUZBV0FogXqBjMGfgbLBxoHawe+CBMIagjDCR0JegnZCjkKnAsBC2cL0Aw6DKcNFg2GDfkObg7lD14P2RBWENURVhHZEl4S5hNvE/sUiRUZFaoWPxbVF20YCBikGUMZ5BqHGywb1Bx+HSkd1x6HHzof7iClIV4iGSLXI5YkWCUcJeMmqyd2KEMpEinkKrcrjixmLUAuHS78L94wwTGnMpAzejRnNVY2SDc8ODI5KjolOyI8IT0jPic/LkA2QUFCT0NfRHFFhUacR7VI0UnvSw9MMk1XTn9PqVDVUgRTNVRoVZ5W11gRWU5ajlvQXRReW1+kYPBiPmOPZOJmN2ePaOlqRmulbQdua2/ScTtyp3QVdYV2+HhueeZ7YHzdfl1/34FjguqEc4X/h46JH4qyjEiN4Y98kRmSuZRclgGXqZlTmwCcr55hoBWhzKOGpUKnAajCqoWsTK4Vr+CxrrN/tVK3KLkAutu8uL6YwHvCYMRIxjLIIMoPzAHN9s/u0ejT5dXk1+bZ6tvx3fvgCOIX5CjmPehU6m3sie6o8Mry7vUV9z75avuZ/cr//2N1cnY
} ,
{
"type" : "x-misp-attribute" ,
"spec_version" : "2.1" ,
"id" : "x-misp-attribute--5bc054b9-7080-4bad-95cc-54b3950d210f" ,
"created_by_ref" : "identity--55f6ea5e-2c60-40e5-964f-47a8950d210f" ,
"created" : "2018-10-12T08:12:29.000Z" ,
"modified" : "2018-10-12T08:12:29.000Z" ,
"labels" : [
"misp:type=\"text\"" ,
"misp:category=\"External analysis\"" ,
"osint:source-type=\"blog-post\""
] ,
"x_misp_category" : "External analysis" ,
"x_misp_type" : "text" ,
"x_misp_value" : "Sextortion scams are when an attacker sends emails to people stating that their computer is hacked and that the attackers have been recording the screen and webcam as the user visits adult sites. The scammers then blackmail the recipients by stating they will release the videos if they do not receive a payment in bitcoins.\r\n\r\nIn the past, the sextortion emails would just include a target's password that the attackers found from a data breach dump in order to scare the victim into thinking that the threats were real. Now the scammers are also pretending to have access to the target's email account by spoofing the sender of the scam email to be the same email as the victim.\r\n\r\nThese scams have become very profitable, with scammers making over $50K in one week, and this new variant is no different. According to reporting by Dani\u00ebl Verlaan, this new variant was first seen targeting victims in the Netherlands where the scammers made \u20ac40,000.\r\n\r\nAfter learning about this new campaign, a security researcher known as SecGuru, who has been monitoring these scams, found a similar variant in English. SecGuru told BleepingComputer that the subject of these emails is \"[email address] + 48 hours to pay\".\r\n\r\nFor example, if my email address was example@example.com, the subject of the sextortion email would read \"example@example.com 48 hours to pay\" and sender of the email would be my own email account."
} ,
{
"type" : "marking-definition" ,
"spec_version" : "2.1" ,
"id" : "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ,
"created" : "2017-01-20T00:00:00.000Z" ,
"definition_type" : "tlp" ,
"name" : "TLP:WHITE" ,
"definition" : {
"tlp" : "white"
}
}
]
}
