Envelope-to: headoffice@bfbio.com
Delivery-date: Mon, 25 Feb 2019 12:06:00 -0800
Message-ID: <5C7466BB.8010003@bfbio.com>
Date: Mon, 25 Feb 2019 23:05:47 +0100
From: <headoffice@bfbio.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.9) Gecko/20100825 Thunderbird/3.1.3
MIME-Version: 1.0
To: <headoffice@bfbio.com>
Content-Type: text/plain; charset=IBM852; format=flowed
Content-Transfer-Encoding: 8bit
 
 Content preview:  Hello! As you may have noticed, I sent you an email from your
    account. This means that I have full access to your account. I've been watching
    you for a few months now. The fact is that you were infected with malware
    through an adult site that you visited. 
 
 Content analysis details:   (19.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 0.9970]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                             [31.154.14.43 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  3.6 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP
                             addr 2)
  2.5 BITCOIN_SPAM_02        BitCoin spam pattern 02
  0.1 BITCOIN_DEADLINE       BitCoin with a deadline
  3.0 BITCOIN_MALWARE        BitCoin + malware
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject: ***SPAM***  Security Notice. Someone have access to your system.

Hello!

As you may have noticed, I sent you an email from your account.
This means that I have full access to your account.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other device.
This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails and contacts on social networks.
I can also post access to all your e-mail correspondence and messengers that you use.

If you want to prevent this,
transfer the amount of $639 to my bitcoin address (if you do not know how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is: 1DASN5fH1E1PCoxU9qMEF7QDjnXcA2b3Km

After receiving the payment, I will delete the video and you will never hear me again.
I give you 48 hours to pay.
I have a notice reading this letter, and the timer will work when you see this letter.

Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address.
I do not make any mistakes.

If I find that you have shared this message with someone else, the video will be immediately distributed.

Best regards!