{"id":540,"date":"2017-10-09T04:01:06","date_gmt":"2017-10-09T04:01:06","guid":{"rendered":"http:\/\/bitcoinwhoswho.com\/blog\/?p=540"},"modified":"2017-10-19T00:11:40","modified_gmt":"2017-10-19T00:11:40","slug":"blackmail-scam-run-on-russian-wallet-matbea","status":"publish","type":"post","link":"https:\/\/www.bitcoinwhoswho.com\/blog\/2017\/10\/09\/blackmail-scam-run-on-russian-wallet-matbea\/","title":{"rendered":"Blackmail Scam Run on Russian Wallet Matbea"},"content":{"rendered":"<p>BitcoinWhosWho.com started receiving reports of a mass email attempting to blackmail recipients out of bitcoin about a month ago. The hilariously worded text always closes with &#8220;sorry for misprints, I am foreign&#8221;. Rudimentary block exploring shows at least some of these scam addresses are being consolidated on the Russian wallet service Matbea.com.<!--more--><\/p>\n<p>The most successful two addresses identified with this email scam (<a href=\"http:\/\/bitcoinwhoswho.com\/address\/16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY\">16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY<\/a>,<br \/>\n<a href=\"http:\/\/bitcoinwhoswho.com\/address\/1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG\">1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG<\/a>) sent their balances to;<\/p>\n<p><a href=\"http:\/\/bitcoinwhoswho.com\/address\/1LFYZfbBQnTpWT8aitzCy3byex81JEQ9Ya\">1LFYZfbBQnTpWT8aitzCy3byex81JEQ9Ya<\/a> <br \/>and<br \/>\n<a href=\"http:\/\/bitcoinwhoswho.com\/address\/13F8hUekfccZq4J7dpiPY11ooriECtNKLy\">13F8hUekfccZq4J7dpiPY11ooriECtNKLy<\/a><\/p>\n<p>which belong to Matbea wallets. <\/p>\n<p><strong>Known Addresses That Appear In Versions of This Email<\/strong><\/p>\n<p>16FqwvZdty3H3B5hjHK268YvDoDFaUxBhY<br \/>\n1FoR6263co7SA9BAA3qrrH4sT7qSFnMMBG<br \/>\n14r4WEjfCYFSqX1DkQgV9gDqjMCuUT6Pzb<br \/>\n1AE2cBJDn4cuLCR6RPESpqdaDXdZwhgUya<br \/>\n1E4Bvzhj82u8M22y7sGJskd62ZLhtNvj63<br \/>\n1NW3zSGDXbvcZgfTxRdkaC4PMmBCfaMmX3<br \/>\n146VbDSrJqNuVDPwTMH86Zv4Y7Yft54GRc<br \/>\n1DyphQnmq3rPDvcvkhoX5cSQU8cGURNYQi<br \/>\n17iXuYKgHv4weVmU3Qm6ry1hz1QmYfZhrJ<br \/>\n1ALLCkbjXfnKEFLSxVisVMbrAYZWocfVk2<br \/>\n1LpaCV4Peq2px2JbFqESpMaeei9fuCnQ5i<br \/>\n19KQpdXBtjAuzP6D8Tn21jdZ82PVkWk8XK<br \/>\n193rUViP2jKkqn7ZD2SxfrdD4uf6toZMid<br \/>\n1HAKmdQNDGAuCEW3QbW7ijbo2eKMUpNH7c<br \/>\n1M27sreqSwmxCgy6jbuEKPfv9gLjRVfchW<br \/>\n1qxnya7yCFj3ypAYvFFD3UaKK7PaXHvAV<br \/>\n13xjRFEbQNn8Ut6Jkxv9w5dDcD23ymZhuw<br \/>\n15oWsEQ8N2zN72X3UmenwuP3CSdwqnf8bp<br \/>\n16xaTT2AaPmaiaAYn9wwbjVLwmzozPckJw<br \/>\n19erHb7FxesMTjSm3QB9bKAscpPw46fcSe<br \/>\n1KHjvZJBrQyffWKEqjFAcCXcfLKV3fRxxM<br \/>\n1NK6NyMHnAuiYh3TMr8ADtca5wTHzora3u<br \/>\n1sdVjarp83LgB8ogxPg3ZavURd8tE36Mo<br \/>\n16NqZUQSH8VbJSzn8Hj1W7dU3geSQ7AehM<br \/>\n17VEVEzRNYgmFeqiPwDH8mmEUisRixNqG9<br \/>\n18c84hdnjHvV3jbeEqMz4ERB1DC6c3fWV4<br \/>\n1GxJFBeok1yinq69kcBRszDpcYcGyJfE3L<br \/>\n1MvqFK9TVbZyF18UbyKiXgYQ4wHN5ChVBw<br \/>\n1P2Udy325s2WfHCXYhftJj1SRPBRopbc29<\/p>\n<p>1BbW3RMzNjxHAtrWf8QgjWqsKpHACfQuEJ<br \/>\n1Gn1gaw3pn1CuS81t9ff77LhDjW7ie8eHZ<br \/>\n13DMmVeV6ZV5fWj4jDEKr3CfPRwVaHM9uj<br \/>\n16UYZnQUTPZ8ek2ZbuU6wEZX47M6gbnfMm<br \/>\n16oooMVEjvdbmMRXJip8PPBewKh2PPkxmm<br \/>\n16rbS4dG2AdhxY7dBhyiFd6iVp3Eqs3PNt<br \/>\n1FZHqtz9i7yjXPFJmff6uqZt1n1QedPTP<\/p>\n<p><strong>The Bitcoin Scam Blackmail Email Text<\/strong><\/p>\n<blockquote><p>I do not want to judge anyone, but in sum of few cases, we have touchpoint from now. I do not think that caress oneself is very ill, but when all your acquaintances see it- its obviously bad. <\/p>\n<p>So, closer to the point. You visited the website with porn, which I&#8217;ve adjusted with the deleterious soft. After you chose video, virus started working and your device became acting as rdp since that moment. Naturally, all cams and screen started recording instantly and then my soft collected all contacts from your device.<\/p>\n<p>I text you on this e-mail address, cuz I&#8217;ve collected it with my soft, and I think you for sure check this work e-mail.<\/p>\n<p>The most interesting point that I created video, on one side it shows your screen record, on second your cams record. Its very amusingly. But it wasn&#8217;t so easy .<\/p>\n<p>All in all- if you want me to erase all this compromising evidence, here is my BTC wallet address- [] (it should be without \u00abspaces\u00bb or \u00ab aquo;,check<br \/>\nit). If you do not know how to make btc transactions, you can ask google or youtube for advice- its very easy. I suggest, that 340 usd will finish our problem and will destroy our point of contact in perpetuity. You have one day after reading this letter(I put special pixel in it, ill know when you open it). If you do not able to finish transaction, ill share the compromising with all contacts I&#8217;<br \/>\nve collected from you.<\/p>\n<p>I do not think that cops can find me for only one day(not even 10 days), so think twice, you can lose your honor. Sorry for misprints, I am foreign.<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>BitcoinWhosWho.com started receiving reports of a mass email attempting to blackmail recipients out of bitcoin about a month ago. The hilariously worded text always closes with &#8220;sorry for misprints, I am foreign&#8221;. Rudimentary block exploring shows at least some of these scam addresses are being consolidated on the Russian wallet service Matbea.com.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11,31],"tags":[51,52],"_links":{"self":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/540"}],"collection":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/comments?post=540"}],"version-history":[{"count":12,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/540\/revisions"}],"predecessor-version":[{"id":553,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/540\/revisions\/553"}],"wp:attachment":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/media?parent=540"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/categories?post=540"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/tags?post=540"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}