Beware scammers

[melonfool]

Moderator Message:
I've merged this with RedSturgeon's previous thread on the same topic. Mel

[UncleEbenezer]

Well would you put out a Bitcoin wallet address on a spam blackmail email that you use for anything else?

Slarti

Would I? Hmmm ...

Have you stopped beating your wife?

[Slarti]

I've had 2 or 3 of those in my ISP's spam trap. But the email addresses they were to were not of anybody who has ever been on my domain and the passwords were not valid on my systems.

I think that they are selecting people from http://haveibeenpwned.com/ where, as well as real ones, there are many, many false email addresses.

Slarti

Are you suggesting that if I put my email address in their search tool, they retain it? Because I didn't think they did?

Mel

Not at all.

haveibeenpwned contains a list of email addresses gathered from the Dark Web (as I understand it) that are being offered for sale, together with an indication if there is a password with the address.

When you search for a full domain, I have 2, you get a list of all that have been for sale, where they were leaked from and if there was a password attached.

So for one of my domains where there have only ever been 5 email address, the list of pwned ones contained over 60, but missed 2 of the real ones. It looked like most had been leaked by the type of people who buy lists in good faith, or in other words, they've been conned and then hacked. Possibly through the list that they bought.

Slarti

[UncleEbenezer]

It seems these folks have adopted something more scary: https://www.theregister.co.uk/2018/12/1 ... _scammers/