Extortion attempts - page 2. | Bitcointalksearch.org

So, we at http://luckyb.it received another extortion attempt, mostly related to our latest "win 5 bitcoin if you guess the world-cup winner" promo.

We thought it's better to publish these things, so other site operators are warned.

We had an standard "vulnerability scan" this morning ~7 UTC, coming from 173.233.126.140 (dsl-140.pool2.5.e120.sumt.ftc-i.net).
Dynamic home IP - the whole scan came from the same IP, so it was easy to block and most likely just a kiddy that got hold of some webapp security scanner.

Short after that, we received the mail below, coming from 46.19.139.98.

We're of course not giving in to extortion attempts (especially not to such poorly executed ones).
We hope this helps some other site operators - let's get this idiots out in the open

LuckyBit support

Code:

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=N1-0105; d=Safe-mail.net;
	b=q8tg9TIGwO/dhWOC37sNDuS08lFLO1GZrK9vHXdB2oV187Zdn1h5Cs0+7B1Kwj3e
	YuPG/WP3e9pWt6M6S91QGecTkWgcVjj2r+8LqdwLgYlIpDjjG7UOCeEqeTHdxmA8
	Mbw53/bZEs73yjYX/1wVGKiH4KpQovhO6YIdmtABE9I=;
Subject: Security Findings - Exploits Discovered 
Date: Thu, 26 Jun 2014 03:24:58 -0400
From: [email protected]
To: [email protected]
Message-Id: 
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

A recent penetration test of your site found the following:

     Confirmed High Risk: 3
     Confirmed Medium Risk: 122
     Confirmed Low Risk: 84
     Confirmed Informational (Information Gathering): 64

We want to help secure you and the BTC, torrent, and download services community. Our work is to exploit and report on the security of all Bitcoin, torrent, and download services online. 

The following are your options: 

1. Send 1.841 BTC to the following address: 16CTrB3BkSaQazoKeS3qKn9DgaofZP8p4J
- By doing so you ensure that you and ONLY you get the penetration and security report. It will be sent, then destroyed. 
- You can help secure your servers from black hat hackers, and you can give a larger level of trust to your users. 

2. Do nothing an ignore this email. 
- The report will be published on several sites on the onion network, clearnet, torrent sites, and exploit sites such as exploitdb.
- You risk the immediate threat of having thousands of experienced hackers now targeting your site. 
- If you received a High Risk notification, this indicates that you are in danger of complete compromise of your site, servers, and data. 

If you decide to meet the bounty you will receive the following: 
- The test ran. 
- The applications used. 
- Remediation tactics including OVAL & XCCDF class 4 scripts to fix your site. 
- And support from us. 

You have until 06/26/2014 to send 1.841 BTC to 16CTrB3BkSaQazoKeS3qKn9DgaofZP8p4J in order to gather the reports generated. Failure to do so will result in releasing the already obtained security flaws with detailed instructions on how to penetrate your site. 

This is not a threat, this is securing the clearnet BTC community. 

Note: Once payment has been sent, please respond to to this email with your sending address, as well as the address we can email you the reports. Typical archived size of the pdf files can exceed 10mb. Also, upon request we can send you our PGP if you wish to ask further questions, but the deadline will not be lifted nor extended.

Topic: Extortion attempts - page 2. (Read 2288 times)