It’s October 2024 and scammers are constantly devising new tactics to exploit unsuspecting individuals. One of the most alarming trends is sextortion, where cybercriminals threaten to reveal intimate or compromising material unless their demands are met. One of the latest scams circulating involves deceitful emails where the sender claims to have installed the notorious Pegasus spyware on the recipient’s devices. The email threatens to expose compromising videos or information unless a ransom is paid in cryptocurrency.
This article aims to dissect this scam attempt, inform readers about its fraudulent nature, and provide guidance on how to protect oneself from such malicious schemes.
Understanding the Scam Email
The scam email is structured to incite fear and prompt immediate action from the recipient. Here’s a breakdown of the key elements commonly found in this fraudulent message:
1. Claim of Pegasus Spyware Installation
The sender asserts that they have installed Pegasus spyware on all of the recipient’s devices. Pegasus is real spyware developed by the NSO Group, typically used by governments for surveillance. By invoking the name ‘Pegasus,’ the scammer aims to lend credibility to their claims and intimidate the receiver.
Excerpt from the scam email:
“Have you heard about regarding Pegasus? This is a monitoring software application that installs on computers and cell phones and allows malicious actors to monitor the activity of machine operators.”
2. Allegations of Compromising Material
The email alleges that the scammer has obtained sensitive videos or information that could tarnish the recipient’s reputation if released.
Excerpt:
“I’ve captured countless videos of you masturbating to highly dubious adult clips… I suspect you’d want your friends, relatives, and colleagues to know about it.”
3. Threat of Exposure
A common tactic is threatening to send compromising material to all contacts unless a ransom is paid. The scammer pressures the recipient by setting a short deadline.
Excerpt:
“Every number in your contact book will abruptly receive these footage… From that moment, you have exactly 48 hours to send the cash.”
4. Demand for Cryptocurrency Payment
Scammers often request payment in cryptocurrencies like Bitcoin due to the anonymity it provides, making it difficult for authorities to trace the transaction.
Excerpt:
“Send $1300 USD to my bitcoin wallet: 1PGJAbR4xwx1vdY2AJxJJTyaT33qXjKiez”
5. Attempts to Prevent Reporting
The email warns against contacting law enforcement or attempting to remove malware, claiming they are monitoring all actions.
Excerpt:
“Do not contact the police. I have access to all your equipment… Do not try to reboot or eliminate your equipment.”
Analyzing the Scam Tactics
Psychological Manipulation
The scam leverages fear, shame, and urgency to manipulate the recipient. By threatening personal exposure and setting a tight deadline, the scammer hopes the victim will act hastily.
Exploitation of Technical Jargon
Using terms like ‘Pegasus’ and referencing multiple operating systems (iOS, Windows, Android) is intended to confuse and convince the recipient of the scammer’s technical prowess.
Anonymity and Irreversibility of Cryptocurrency
Requesting Bitcoin payments provides a layer of anonymity for the scammer and makes it virtually impossible to recover the funds once sent.
Why This Scam is Bogus
- Mass-Produced Emails: Such scam emails are sent out en masse using hacked SMTP servers without any personalization, relying on the probability that some recipients might fall prey.
- Technical Improbabilities: Installing Pegasus spyware on all devices is highly unlikely for an individual scammer, as it requires sophisticated techniques typically beyond the reach of common cybercriminals.
- Lack of Evidence: The scammer provides no actual proof of their claims, such as samples of the alleged compromising material.
- Generic Language and Errors: The email often contains grammatical errors and generic language, indicating it is not specifically tailored.
How to Protect Yourself
1. Do Not Engage
- Do Not Respond: Avoid replying to the email or fulfilling any of the scammer’s requests.
- Do Not Send Payment: Sending money will only encourage the scammer and possibly lead to further extortion attempts.
2. Strengthen Security Measures
- Update Software: Ensure all your devices have the latest security updates and patches.
- Use Antivirus Software: Regularly scan your devices with reputable antivirus and anti-malware programs.
- Change Passwords: Update your passwords, especially if you suspect any accounts may have been compromised.
3. Report the Scam
- To Authorities: Report the email to your local cybercrime unit or law enforcement agency. You can also use a reverse email lookup tool to find more details about the sender before reporting.
- Email Providers: Flag the email as spam or phishing so that email providers can take action to block similar messages.
4. Educate Yourself and Others
- Stay Informed: Keep up-to-date with the latest scams and cybersecurity threats.
- Share Information: Inform friends, family, and colleagues about such scams to prevent them from falling victim.
Recognizing Common Scam Indicators
- Unsolicited Contact: Unexpected emails from unknown senders claiming urgent action is needed.
- Threats and Ultimatums: Imposing deadlines and consequences to pressure immediate compliance.
- Requests for Cryptocurrency: Demands for payment in Bitcoin or other cryptocurrencies.
- Poor Language Quality: Emails riddled with grammatical errors and unnatural phrasing.
- Lack of Personalization: Generic greetings and lack of specific personal details.
Conclusion
Cybercriminals continually adapt their tactics to exploit human emotions and technological vulnerabilities. The scam email threatening exposure with fake Pegasus malware claims is a prime example of such deceit. By understanding how these scams operate and taking proactive steps to safeguard your digital presence, you can protect yourself and help others stay safe in the digital age.
Complete email below:
Good day!
I want to inform you about a very bad predicament for you. But, you can profit from it, if you will react wisely.
Have you heard about regarding Pegasus? This is a monitoring software application that installs on computers and cell phones and allows malicious actors to monitor the activity of machine operators. It provides entry to your video feed, messengers, e-mails, voice transcripts, etc. It operates well on iOS, Windows, Android. I suppose, you previously figured out where I am getting at.
It’s been some months since I installed it on every your devices due to you weren’t quite selective about what links to click on on the internet. During this period, I’ve gained knowledge about each aspects of your personal life, but one is of particular significance to me.
I’ve captured countless videos of you masturbating to highly dubious adult clips. Given that the “questionable” category is almost always the same, I can deduce that you have sick fetish.
I also saved each your crucial files – records, images, videos, etc. – to a distant storage.
I suspect you’d want your friends, relatives, and colleagues to know about it. Nevertheless, I can accomplish it in a handful of clicks. Every number in your contact book will abruptly receive these footage – on Whats-App, on Telegram, on Skype, on e-mail – all over. It is about to be a tsunami that will erase everything in its way, and in the first instance, your former situation. Do not think of yourself as an guiltless target. No one knows where your corruption may take in the time ahead, so view this a kind of merited retribution to halt you. Sooner late than forever. I am some kind of God who observes everything. Nonetheless, don’t panic. As we know, God is merciful and forgiving, and so do I. But my mercy is not complimentary.
Send $1300 USD to my bitcoin wallet:
1PGJAbR4xwx1vdY2AJxJJTyaT33qXj
Let’s confront it, that is a fairly insignificant quantity in current environment.
Once I get corroboration of the transaction, I’ll permanently delete all clips compromising you, uninstall Pegasus from all of your items, and disappear from your existence. You can be confident – my gain is only cash. Otherwise, I would not be writing to you, nevertheless ruin your world without a statement in a heartbeat.
I’ll be notified when you open my email, and from that moment, you have exactly 48 hours to send the cash. If virtual currencies are an unexplored domain for you, don’t worry; it’s fairly straightforward. Just search “crypto market” and then it will be no harder than buying a few useless stuff on Amazon.
I strongly warn you against the subsequent:
– Do not answer to this electronic mail. I dispatched it from a disposable email so I am anonymous.
– Do not contact the police. I have access to all your equipment, and when I find out you went to the police, footage will be released.
– Do not try to reboot or eliminate your equipment. As I noted above: I am monitoring all your behaviors, so you either consent to my demands or the videos are published.
Also on, do not overlook that cryptocurrencies are anonymous, so it’s impossible to identify me using the supplied address. Good wishes, my deviant friend. I heartily wish you will take the appropriate decision and this is the last time we speak from each other.
And a couple of helpful suggestions: as of now, don’t be so negligent about your internet protection.
