HOME

Mini Shell 1.0
DIR:/home/dna1981/mail/cur/
Current File : /home/dna1981/mail/cur/1555279266.M471188P7964.dna.dna-1981.com,S=5965,W=6089:2,
Envelope-to: artdept@thelogomasters.com
Delivery-date: Sun, 14 Apr 2019 17:01:06 -0500
Message-ID: <E90B7F144E9D6025C7B3D88251ACE90B@I5194U78>
From: <artdept@thelogomasters.com>
To: <artdept@thelogomasters.com>
Date: 15 Apr 2019 00:49:21 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="cp-850"
Content-Transfer-Encoding: 8bit
 
 Content preview:  Hello, minx! As you can see - I sent you this email from your
    account. Yes! I have full access to artdept@thelogomasters.com. Moreover,
    I have full access to your device. I have been watching you for several months.
    The thing is, you got infected with my spyware about three months ago. 
 
 Content analysis details:   (32.4 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.5 BAYES_60               BODY: Bayes spam probability is 60 to 80%
                             [score: 0.6399]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: thelogomasters.com]
  4.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
                             address
                             [188.147.39.68 listed in dnsbl.sorbs.net]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [188.147.39.68 listed in psbl.surriel.com]
  3.5 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname
                             (Split IP)
  0.0 TVD_RCVD_IP            Message was received from an IP address
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  3.5 BITCOIN_SPAM_07        BitCoin spam pattern 07
  3.0 BITCOIN_DEADLINE       BitCoin with a deadline
  2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
                             (FTSDMCXX/boundary variant) + direct-to-MX
  3.1 BITCOIN_MALWARE        BitCoin + malware
  2.5 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  0.0 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  2.5 DOS_OE_TO_MX           Delivered direct to MX with OE headers
X-Spam-Flag: YES
Subject:    Security Alert. Your accounts was hacked by criminal group.

Hello, minx!

As you can see - I sent you this email from your account.
Yes! I have full access to artdept@thelogomasters.com.
Moreover, I have full access to your device.

I have been watching you for several months.
The thing is, you got infected with my spyware about three months ago.

I first infected the router to which you connected to access the Internet.
Then through the router your device was infected.

If you do not understand the nuances, then I will explain
Spyware gives me full access and control over a computer or any other device.
This means that I can see everything on your screen, scan your hard drive, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why didn't your antivirus detect malware?
The fact is that my program updates its signatures every 6 hours, so the anti-virus database does not have time to track it.

I scanned your hard drive and found enough of your frank and very sexy photos to be surprised.
Oh yeah! You are beautiful and amazing. I would not mind having an affair with you but I need the funds.

YES! With a single keystroke, I can send these photos to all your contacts in the mail, phone and social networks.
I can also publish access to all your accounts that you use, including the current one.

If you do not want to allow this, then:
transfer $587 to my bitcoin address (if you don't understand something, write to Google: "Buy bitcoin").

My Bitcoin address (BTC wallet): 19qqYeGgbzhT8Lic5WsbDZgJkzAy82R6fF

After receiving the payment, I will delete all your photos and other data, and you will never see me again.
I will also launch a team that will remove my virus from your device!
I give you 48 hours (2 days) for payment.

I have a notice of this letter being read, and the countdown will work when you see this letter.

There is no point in complaining or writing anywhere, since this letter cannot be traced.
I'm never wrong!

Know that I am closely watching your device and all your accounts.
If I see that you share with someone about this letter, then all your photos and data will be instantly distributed!

Remember that if during the specified time I do not receive payment - photos and data will be instantly distributed, and your device will be encrypted!

Be clever girl!

Your respectable observer.