{"id":1372,"date":"2019-01-22T00:04:22","date_gmt":"2019-01-22T04:04:22","guid":{"rendered":"https:\/\/bitcoinwhoswho.com\/blog\/?p=1372"},"modified":"2019-03-18T22:43:18","modified_gmt":"2019-03-19T02:43:18","slug":"popular-sextortion-bitcoin-addresses","status":"publish","type":"post","link":"https:\/\/www.bitcoinwhoswho.com\/blog\/2019\/01\/22\/popular-sextortion-bitcoin-addresses\/","title":{"rendered":"Popular Sextortion bitcoin addresses"},"content":{"rendered":"\n<p>How successful has the bitcoin sextortion email campaign been?<\/p>\n\n\n\n<h3>[tweetshare tweet=&#8221;Top 50 Sextortion Addresses Received 92 BTC&#8221;] <\/h3>\n\n\n\n<!--more-->\n\n\n\n<h3>List of Top 50 Most Frequently Reported Sextortion Email Bitcoin Addresses<\/h3>\n\n\n\n<table class=\"wp-block-table\"><tbody><tr><td><strong>Bitcoin Address<\/strong><\/td><td><strong># Reports<\/strong><\/td><td><strong>Total Rec.<\/strong><\/td><\/tr><tr><td>1JTtwbvmM7ymByxPYCByVYCwasjH49J3Vj<\/td><td>69<\/td><td>5.103764<\/td><\/tr><tr><td>1EZS92K4xJbymDLwG4F7PNF5idPE62e9XY<\/td><td>65<\/td><td>3.620486<\/td><\/tr><tr><td>15ZHnf1MPn6ybb8yUeAoCQ1AJtiKhg3NrP<\/td><td>40<\/td><td>2.986195<\/td><\/tr><tr><td>1GR7rJfntdcbfhKT1s33RDby4z5ex1ou4Z<\/td><td>34<\/td><td>2.029698<\/td><\/tr><tr><td>1GXazHVQUdJEtpe62UFozFibPa8ToDoUn3<\/td><td>34<\/td><td>2.094883<\/td><\/tr><tr><td>1FgfdebSqbXRciP2DXKJyqPSffX3Sx57RF<\/td><td>32<\/td><td>4.59627<\/td><\/tr><tr><td>14bXUoPwruptLamUfKTuMW39Qy1q4ohX9w<\/td><td>30<\/td><td>1.95618<\/td><\/tr><tr><td>13cyEdT7kyH2f4j9xchvDGhv1o64MYNLUS<\/td><td>29<\/td><td>1.729329<\/td><\/tr><tr><td>1HQ7wGdA5G9qUtM8jyDt5obDv1x3vEvjCy<\/td><td>29<\/td><td>3.589956<\/td><\/tr><tr><td>1PL9ewB1y3iC7EyuePDoPxJjwC4CgAvWTo<\/td><td>29<\/td><td>2.554139<\/td><\/tr><tr><td>1Bt4psBJmjfVTcW6eYiJZ6HEbpFgKkBSX4<\/td><td>27<\/td><td>1.768818<\/td><\/tr><tr><td>1BzkoGfrLtL59ZGjhKfvBwy47DEb6oba5f<\/td><td>25<\/td><td>2.333494<\/td><\/tr><tr><td>1H9bS7Zb6LEANLkM8yiF8EsoGEtMEeLFvC<\/td><td>25<\/td><td>5.300239<\/td><\/tr><tr><td>1HqUfvPooEY3fQPsuM4dRzq5uzTQjDoYpt<\/td><td>24<\/td><td>1.293091<\/td><\/tr><tr><td>1MN7A7QqQaAVoxV4zdjdrnEHXmjhzcQ4Bq<\/td><td>24<\/td><td>1.616511<\/td><\/tr><tr><td>17XHRucfd4kx3W5ty7ySLGiKHqmPUUdpus<\/td><td>23<\/td><td>1.328595<\/td><\/tr><tr><td>18YDAf11psBJSavARQCwysE7E89zSEMfGG<\/td><td>23<\/td><td>1.054268<\/td><\/tr><tr><td>1DVU5Q2HQ4srFNSSaWBrVNMtL4pvBkfP5w<\/td><td>23<\/td><td>1.700544<\/td><\/tr><tr><td>1LwibmKAKu4kt4SvRLYdUP3aW7vL3Y78zL<\/td><td>23<\/td><td>1.917556<\/td><\/tr><tr><td>1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ<\/td><td>23<\/td><td>2.555182<\/td><\/tr><tr><td>12ziVv4aQkZTA1gj86Y9uYQByG4CcdVcTA<\/td><td>22<\/td><td>1.484536<\/td><\/tr><tr><td>1BncH5WxBSYJ6mmcJC9bCRxQ6Z1evvtRxk<\/td><td>22<\/td><td>1.394207<\/td><\/tr><tr><td>1NXNt72qfMhPZDffUEqryCYpEUzyR6LmgH<\/td><td>21<\/td><td>1.931748<\/td><\/tr><tr><td>1YnYAxprVrTo1WzPPzMo86ste5Ssp4xsy<\/td><td>21<\/td><td>0.746122<\/td><\/tr><tr><td>1GdegtNpYcvoCPsMmyiSkZARDdAmYuXGXU<\/td><td>20<\/td><td>1.12032<\/td><\/tr><tr><td>1PwENLsmQ2Z6b4EJfXDeeXKBj9v878uHRf<\/td><td>20<\/td><td>1.402004<\/td><\/tr><tr><td>1FF2wjexfHHiiuWwaA6dSEeA4WzAb4ezjU<\/td><td>19<\/td><td>0.990119<\/td><\/tr><tr><td>1PcFYw7PQKUnj6RxqVwZ4TFuwWUPTyECKQ<\/td><td>19<\/td><td>2.053624<\/td><\/tr><tr><td>14VbGhtysr6wrNs7EhdKiS2NoMmMDBM8cn<\/td><td>18<\/td><td>0.630783<\/td><\/tr><tr><td>182PJESsEWbuJ8PEgfM58p64jbok3i1gNU<\/td><td>18<\/td><td>4.723927<\/td><\/tr><tr><td>19qL8vdRtk5xJcGNVk3WruuSyitVfSAy7f<\/td><td>18<\/td><td>1.423029<\/td><\/tr><tr><td>1FHPbKHcSx9CaXJzDpLoXG733ipQ77UNx9<\/td><td>17<\/td><td>0.50824<\/td><\/tr><tr><td>1DzM9y4fRgWqpZZCsvf5Rx4HupbE5Q5r4y<\/td><td>16<\/td><td>1.513578<\/td><\/tr><tr><td>1HkKgPbcMyfhrdPsbufTFczzVnhyT5snB3<\/td><td>16<\/td><td>1.130829<\/td><\/tr><tr><td>17vzpL7n29egdeJF1hvUE4tKV81MqsW4wF<\/td><td>15<\/td><td>1.578436<\/td><\/tr><tr><td>19kXyFbvetft819v4QV5g9vzrjwNqRtvgA<\/td><td>14<\/td><td>0.303089<\/td><\/tr><tr><td>1CMQMKmvT4hz2k2ijyxVxN7fHS62K7uQ7z<\/td><td>14<\/td><td>1.188236<\/td><\/tr><tr><td>135qVXXBZb3v2tQcLJRA8UAndiUYNybh3J<\/td><td>13<\/td><td>0.913665<\/td><\/tr><tr><td>1B1Vov1LTLGLcVG3ycPQhQLe81V67FZpMZ<\/td><td>13<\/td><td>1.943423<\/td><\/tr><tr><td>1Lughwk11SAsz54wZJ3bpGbNqGfVanMWzk<\/td><td>13<\/td><td>0.542429<\/td><\/tr><tr><td>1Bu2NDQScVQwixvhf4z4xbZQVNFWuXokSJ<\/td><td>12<\/td><td>0.894224<\/td><\/tr><tr><td>1LZQGS99RUCvQvT5Qce7LkrWtMtcXPSdWZ<\/td><td>12<\/td><td>0.888035<\/td><\/tr><tr><td>13DAd45ARMJW6th1cBuY1FwB9beVSzW77R<\/td><td>11<\/td><td>0.922697<\/td><\/tr><tr><td>1GYNGZLEUGkkQjHo19dHDnGE87WsAiGLLB<\/td><td>11<\/td><td>0.93095<\/td><\/tr><tr><td>1MAM6oPcycTrfiLPS9tjtAR8t6KDmL91fr<\/td><td>11<\/td><td>1.083735<\/td><\/tr><tr><td>1MbdGY1LVr6gEjyN3Rok5HQDQcjWbYmLds<\/td><td>11<\/td><td>0.497251<\/td><\/tr><tr><td>1QHEbZG8NQT6vYCC8pyHvteNcmJ78B3ak3<\/td><td>11<\/td><td>1.328918<\/td><\/tr><tr><td>19D67Tgb3neJiTHd8pZDEBYmUn2qSjxEeB<\/td><td>10<\/td><td>0.680201<\/td><\/tr><tr><td>1F5csJmyf3yJs5s25tZmYKoFXznR452er9<\/td><td>10<\/td><td>0.791807<\/td><\/tr><tr><td>1HjeDCAaEdd5JRDPHVgmLsCC7DsyHhYwM1<\/td><td>10<\/td><td>3.147905<\/td><\/tr><tr><td>1LuiqwsE5HF9T2mkS8EN3TLkJRFdbzrR8k<\/td><td>10<\/td><td>1.467617<\/td><\/tr><tr><td>1N2XZZDW5ofnyok6HawSaqzjBVFH5LNr74<\/td><td>10<\/td><td>1.698187<\/td><\/tr><tr><td><\/td><\/tr><\/tbody><\/table>\n\n\n\n<h2>How many times have you received the bitcoin sextortion email? <\/h2>\n\n\n\n<h3>Example Sextortion Email Text<\/h3>\n\n\n\n<blockquote class=\"wp-block-quote\"><p>SUBJECT: Re: Security Alert. You account has been hacked. Password must be need changed. (your password:bitcoinwhoswho)<\/p><p>Dear user of bitcoinwhoswho.com!<\/p><p><br>I am a spyware software developer.<br>Your account has been hacked by me in the summer of 2018.<br><br>I understand that it is hard to believe, but here is my evidence:<br>&#8211; I sent you this email from your account.<br>&#8211; Password from account admin@bitcoinwhoswho.com: bitcoinwhoswho (on moment of hack).<br><br>The hacking was carried out using a hardware vulnerability through which you went online (Cisco router, vulnerability CVE-2018-0296).<br><br>I went around the security system in the router, installed an exploit there.<br>When you went online, my exploit downloaded my malicious code (rootkit) to your device.<br>This is driver software, I constantly updated it, so your antivirus is silent all time.<br><br>Since then I have been following you (I can connect to your device via the VNC protocol).<br>That is, I can see absolutely everything that you do, view and download your files and any data to yourself.<br>I also have access to the camera on your device, and I periodically take photos and videos with you.<br><br>At the moment, I have harvested a solid dirt&#8230; on you&#8230;<br>I saved all your email and chats from your messangers. I also saved the entire history of the sites you visit.<br><br>I note that it is useless to change the passwords. My malware update passwords from your accounts every times.<br><br>I know what you like hard funs (adult sites).<br>Oh, yes .. I&#8217;m know your secret life, which you are hiding from everyone.<br>Oh my God, what are your like&#8230; I saw THIS &#8230; Oh, you dirty naughty person &#8230; \ud83d\ude42<br><br>I took photos and videos of your most passionate funs with adult content, and synchronized them in real time with the image of your camera.<br>Believe it turned out very high quality!<br><br>So, to the business!<br>I&#8217;m sure you don&#8217;t want to show these files and visiting history to all your contacts.<br><br>Transfer $848 to my Bitcoin cryptocurrency wallet: 1GXazHVQUdJEtpe62UFozFibPa8ToDoUn3<br>Just copy and paste the wallet number when transferring.<br>If you do not know how to do this &#8211; ask Google.<br><br>My system automatically recognizes the translation.<br>As soon as the specified amount is received, all your data will be destroyed from my server, and the rootkit will be automatically removed from your system.<br>Do not worry, I really will delete everything, since I am &#8216;working&#8217; with many people who have fallen into your position.<br>You will only have to inform your provider about the vulnerabilities in the router so that other hackers will not use it.<br><br>Since opening this letter you have 48 hours.<br>If funds not will be received, after the specified time has elapsed, the disk of your device will be formatted,<br>and from my server will automatically send email and sms to all your contacts with compromising material.<br><br>I advise you to remain prudent and not engage in nonsense (all files on my server).<br><br>Good luck!<br><\/p><\/blockquote>\n\n\n\n<p>***<br>Only the bitcoin community can police and deter future frauds by reporting scam addresses to <a href=\"http:\/\/bitcoinwhoswho.com\/\">BitcoinWhosWho.com<\/a>. Just lookup the bitcoin address and select \u201cReport Scam\u201d.<\/p>\n\n\n\n<div class=\"wp-block-image size-full wp-image-862\"><figure class=\"aligncenter\"><img loading=\"lazy\" width=\"1268\" height=\"551\" src=\"http:\/\/bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2018\/04\/report-scam-updated2018-1.png\" alt=\"\" class=\"wp-image-862\" srcset=\"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2018\/04\/report-scam-updated2018-1.png 1268w, https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2018\/04\/report-scam-updated2018-1-300x130.png 300w, https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2018\/04\/report-scam-updated2018-1-768x334.png 768w, https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2018\/04\/report-scam-updated2018-1-1024x445.png 1024w\" sizes=\"(max-width: 1268px) 100vw, 1268px\" \/><figcaption>Blacklist Scam Bitcoin Addresses<\/figcaption><\/figure><\/div>\n\n\n\n<p>All scam reports are accessible by keyword search on our website or from our &#8220;Blacklisted Bitcoin Address&#8221; <a href=\"http:\/\/bitcoinwhoswho.com\/api\">API<\/a>.<\/p>\n\n\n\n<p>The safest place to buy bitcoins is <a href=\"https:\/\/www.coinbase.com\/join\/553809f4c00c82deb9000041\" target=\"_blank\" rel=\"noreferrer noopener\">Coinbase.com<\/a><\/p>\n\n\n\n<p>Don&#8217;t forget to <a href=\"https:\/\/twitter.com\/BitcoinWhosWho\" target=\"_blank\" rel=\"noreferrer noopener\">follow us<\/a> on Twitter and <a href=\"https:\/\/www.facebook.com\/bitcoinwhoswho\/\" target=\"_blank\" rel=\"noreferrer noopener\">like<\/a> our page on Facebook.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How successful has the bitcoin sextortion email campaign been? [tweetshare tweet=&#8221;Top 50 Sextortion Addresses Received 92 BTC&#8221;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[60,62],"tags":[101],"_links":{"self":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/1372"}],"collection":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/comments?post=1372"}],"version-history":[{"count":5,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/1372\/revisions"}],"predecessor-version":[{"id":1406,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/1372\/revisions\/1406"}],"wp:attachment":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/media?parent=1372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/categories?post=1372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/tags?post=1372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}