The Internet Security Office detects a new 'sextortion' campaign

The Internet Security Office (OSI) has detected a campaign of fraudulent emails, the objective of which is to extort money from victims to pay a certain amount of money in bitcoins in exchange for not publishing alleged intimate recordings.  

Fraudulent email is sent from a randomly generated email account. The subject with which it is identified is 'I successfully hacked your XXX devices', where XXX are random numbers, although it is not ruled out that there are other emails with similar subjects.

The body of the message is written in Spanish and, although there are no spelling mistakes, the grammar and vocabulary are not those used by a native speaker. In it, the victim is told that their device has been infected with spyware with which they have obtained alleged intimate videos. Cybercriminals threaten to spread these videos to the email recipient's contacts, unless they make a payment in bitcoins within 60 hours.

This deception is known as 'sextortion' and anyone could be a victim of it since, in reality, multimedia content does not exist but is a pretext to cause concern to the recipient and incite him to give in to economic blackmail.


 The 'sextortion' is triggered in Spain: the fear that your intimate videos will be published

 The information that you should never share on the internet or social networks

For this reason, the OSI recommends that anyone who has received an email of this style not reply and delete it. «No one has had access to your devices, nor has they recorded an intimate video. It is a deception that uses social engineering strategies to make you follow the cybercriminal's instructions, "he emphasizes.

Not responding is important because if you do, even if you don't fall for the payment trick, cybercriminals will know that the account is active and will send new scams in the future. If the notice is late and the user has already paid, it is necessary to collect all the evidence -screenshots, e-mails, messages ...- and contact the State Security Forces and Bodies to file a complaint.