Elements the Game Forum - Free Online Fantasy Card Game

Other Topics => Off-Topic Discussions => Tech Talk => Topic started by: worldwideweb3 on September 27, 2019, 07:21:52 pm

Title: Etg password
Post by: worldwideweb3 on September 27, 2019, 07:21:52 pm
I got the following email today, the password is my etg one as well.

Hey, I know your password is: *redacted*

Your computer was infected with my malware, RAT (Remote Administration Tool), your browser wasn't updated / patched, in such case it's enough to just visit some website where my iframe is placed to get automatically infected, if you want to find out more - Google: "Drive-by exploit".

My malware gave me full access and control over your computer, meaning, I got access to all your accounts (see password above) and I can see everything on your screen, turn on your camera or microphone and you won't even notice about it.

I collected all your private data and I RECORDED YOU (through your webcam) SATISFYING YOURSELF!

After that I removed my malware to not leave any traces.

I can send the video to all your contacts, post it on social network, publish it on the whole web, including the darknet, where the sick people are, I can publish all I found on your computer everywhere!

Only you can prevent me from doing this and only I can help you out in this situation.

Transfer exactly 1200$ with the cryptocurrency Monero (XMR) to my Monero (XMR) address.

You can easily buy Monero (XMR) here: www.anycoindirect.eu/en/buy-monero , www.bitnovo.com/buy-monero-online-en , www.localmonero.co , or Google for other exchanger.
You can send the Monero (XMR) directly to my address, or create your own wallet first here: www.mymonero.com , or here: www.cryptonator.com , www.freewallet.org , then receive and send to mine.

It's a very good offer, compared to all that horrible shit that will happen if I publish everything!

My Monero (XMR) address is: 4BrL51JCc9NGQ71kWhnYoDRffsDZy7m1HUU7MRU4nUMXAHNFBEJhkTZV9HdaL4gfuNBxLPc3BeMkLGaPbF5vWtANQubDtNq5uuC622w4we

Copy and paste my address, it's (cAsE-sEnSEtiVE), yes that's how the address looks like and you don't need to include memo or something else.

I give you 4 days to transfer the Monero (XMR), because some exchanger want your verification first before you can buy Monero (XMR).

As I got access to this email account, I will know if this email has already been read.
If you get this email multiple times, it's to make sure you read it, my mailer script has been configured like that and after payment you can ignore it.
After receiving the payment, I will remove everything and you can life your live in peace like before.

Next time update your browser before browsing the web!




So um wtf also obvs don’t click on any links or stuff.
Title: Re: Etg password
Post by: Submachine on September 27, 2019, 07:33:53 pm
Just stay calm and read this.~ You are not in real danger.

https://malwaretips.com/resources/i-infected-you-with-my-private-malware-rat-fake-blackmail-scam.277/

Also, change the revealed password everywhere you used it.
Title: Re: Etg password
Post by: RapidStar_ on September 28, 2019, 06:26:38 am
This has happened before to me from old accounts - I'm pretty sure it is when someone gets access to a really old database, find passwords and scare people by saying they know their password to make the user think that all of their other data has also been leaked. Just make sure not to click any links
Title: Re: Etg password
Post by: Fippe94 on September 28, 2019, 07:48:13 am
Definitely looks like just a scam, but id like to take this opportunity to warn everyone about etg passwords.

Etg passwords are very insecure. They are stored as plain text in the database which is a big no no when it comes to password security. I recommend everyone to NOT use the etg password for anything else. Ideally you should use different passwords for all services of course, but this is especially important when it comes to Elements because the passwords are so horribly insecure.
Title: Re: Etg password
Post by: dawn to dusk on September 28, 2019, 08:21:48 am
tl;dr
There was probably some leak of passwords at some point, and the people in charge of the scam went through a leak database, found an email attached to it, and sent that message. They didn't infect you with anything, and all of your data is safe. But change your passwords anyway, just to make sure

I thought I'd seen that message before so I did some digging and I remembered where I saw it


This video is from someone who is very knowledgeable about this stuff, who got the same email, word for word, that you did. He outlines that it's just a scam, and basically says that you're safe
Title: Re: Etg password
Post by: Submachine on September 28, 2019, 09:23:26 am
Definitely looks like just a scam, but id like to take this opportunity to warn everyone about etg passwords.

Etg passwords are very insecure. They are stored as plain text in the database which is a big no no when it comes to password security. I recommend everyone to NOT use the etg password for anything else. Ideally you should use different passwords for all services of course, but this is especially important when it comes to Elements because the passwords are so horribly insecure.
That's a good warning. I remember two other sites that have been breached this year for database passwords; Pokemon Showdown and Town of Salem. We should be careful about sites that are similar to those aswell.
blarg: