HOME

Mini Shell 1.0
DIR:/home/dna1981/mail/.spam/new/
Current File : /home/dna1981/mail/.spam/new/1605477579.M388804P1645.dna.dna-1981.com,S=9261,W=9464
Envelope-to: salesl@thelogomasters.com
Delivery-date: Sun, 15 Nov 2020 15:59:39 -0600
From: <yanjie@idiil.com.cn>
To: <salesl@thelogomasters.com>
Date: 15 Nov 2020 14:22:40 -0400
Message-ID: <003301d6bb81$0550abd6$a44802a8$@idiil.com.cn>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0030_01D6BB81.054BEB61"
Thread-Index: Ack95qepdr22ni3gk95qepdr22ni3g==
Content-Language: en-us
    
 Content analysis details:   (26.5 points, 4.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [191.186.207.216 listed in zen.spamhaus.org]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?191.186.207.216>]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                           [191.186.207.216 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [191.186.207.216 listed in psbl.surriel.com]
  1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  0.0 HTML_MESSAGE           BODY: HTML included in message
  3.0 RATWARE_NO_RDNS        Suspicious MsgID and MIME boundary + no rDNS
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.3 PDS_BTC_ID             FP reduced Bitcoin ID
  0.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  2.8 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
X-Spam-Flag: YES
Subject:    =?UTF-8?B?UmVnYXJkaW5nIFpvb20gQ29uZmVyZW5jZSBjYWxs?=

This is a multi-part message in MIME format.

------=_NextPart_000_0030_01D6BB81.054BEB61
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi. You will find this important.
You have used Zoom some time ago. And I have very unfortunate news for =
you.
I'll give you some background on what happened.

There was a zero day security vulnerability on Zoom app, that allowed me =
a full time access to your camera and some other metadata on your =
account.
I had access to your camera ALL the time, even when Zoom app was closed. =
Basically, your device was hacked and remotely controlled.
And as you can imagine in your worst dreams, I have made a footage with =
you as a leading actor.
In the video you can be seen performing sexual act.
Having fun is ok with me, but is not ok with your reputation.

Please dont blame me or yourself for this. You couldn't know that the =
camera was working.
I'm sure you don't want to be the next Jeffrey Toobin and get =
embarrassed in front of all your friends, family and colleagues.
You should get this very clear, I will send this video to all your =
contacts if I dont get paid.
Are you wondering how I got your contacts and emails? Through the same =
exploit, zoom app allowed me to extract all sensitive info from your =
device.

So here is what we will do. You pay me $2000 in bitcoin, and nothing of =
this will happen. You have 2 days to make the payment.
After I get the money, I will delete the footage and information about =
you. The amount is not negotiable.
Send 0.13 Bitcoin (less than 2k USD at the current exchange rate) to my =
wallet 1KJ3ZrhrkXBVjGyAU635sapjLpLSFgpqYe=20
Having trouble with buying bitcoin? Just google on how to buy it, it's =
very easy to use and anonymous.
P.S. Don't try to report this to the police, I use TOR and bitcoin can't =
be traced. Do not email me back. If you do something stupid, I will =
distribute the video.
Good luck. Don&#8217;t stress.

------=_NextPart_000_0030_01D6BB81.054BEB61
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:#0563C1;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:#954F72;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-family:"Calibri","sans-serif";}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US =
link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p =
class=3DMsoNormal>Hi. You will find this important.<br>
You have used Zoom some time ago. And I have very unfortunate news for =
you.<br>
I'll give you some background on what happened.<br><br>
There was a zero day security vulnerability on Zoom app, that allowed me =
a full time access to your camera and some other metadata on your =
account.<br>
I had access to your camera ALL the time, even when Zoom app was closed. =
Basically, your device was hacked and remotely controlled.<br>
And as you can imagine in your worst dreams, I have made a footage with =
you as a leading actor.<br>
In the video you can be seen performing sexual act.<br>
Having fun is ok with me, but is not ok with your reputation.<br><br>
Please dont blame me or yourself for this. You couldn't know that the =
camera was working.<br>
I'm sure you don't want to be the next Jeffrey Toobin and get =
embarrassed in front of all your friends, family and colleagues.<br>
You should get this very clear, I will send this video to all your =
contacts if I dont get paid.<br>
Are you wondering how I got your contacts and emails? Through the same =
exploit, zoom app allowed me to extract all sensitive info from your =
device.<br><br>
So here is what we will do. You pay me $2000 in bitcoin, and nothing of =
this will happen. You have 2 days to make the payment.<br>
After I get the money, I will delete the footage and information about =
you. The amount is not negotiable.<br>
Send 0.13 Bitcoin (less than 2k USD at the current exchange rate) to my =
wallet 1KJ3ZrhrkXBVjGyAU635sapjLpLSFgpqYe <br>
Having trouble with buying bitcoin? Just google on how to buy it, it's =
very easy to use and anonymous.<br>
P.S. Don't try to report this to the police, I use TOR and bitcoin can't =
be traced. Do not email me back. If you do something stupid, I will =
distribute the video.<br>
Good luck. Don&#8217;t stress.<br><o:p></o:p></p></div></body></html>
------=_NextPart_000_0030_01D6BB81.054BEB61--