ISLAMABAD – Scammers impersonate hackers, cops, and hitmen to extort money from victims.
According to Kaspersky, they claim to have access to cameras, microphones, browsing history, and sensitive files, often threatening to release explicit content captured via webcam or screen recordings supposedly taken while the victim was watching adult content.
Demands typically involve hundreds of US dollars in cryptocurrency, with promises to delete the data upon payment. These emails may include detailed narratives of the supposed breach, including explanations of malware types and advice on better security – ironically, tips that align with genuine best practices.
Another scam twist involves fraudsters posing as hired hitmen. In this scheme, the sender claims a contract has been placed on the victim’s life but offers to spare them if they outbid the original payer. The email includes a cryptocurrency wallet for the ransom, framing the scammer as a “merciful” intermediary. This variant relies on fear rather than embarrassment, promising the victim’s life in exchange for payment.
Scammers also impersonate law enforcement agencies, such as the FIA. Victims receive emails with attached PDF or DOC files containing fake summonses accusing them of serious crimes like child exploitation, exhibitionism, or human trafficking. These documents cite fabricated articles of legal codes, feature forged signatures and seals, and urge immediate contact via a provided email to “resolve” the matter. Upon response, the “authorities” demand paying fines to avoid prosecution, often leading to cryptocurrency transfers.
To avoid falling victim to scams, Kaspersky recommends always checking the email’s From field and comparing it to the return email address in the Reply-To field or mentioned in the text of the message. Discrepancies often indicate fraud.
Ignore attachments and links: Do not open unsolicited files, as they may contain malware. Do not click suspicious links, as they may lead to phishing or scam sites.
Know the procedures: legitimate law enforcement organisations are unlikely to send summons via email or demand cryptocurrency payments; they use official channels. Forward suspicious emails to authorities like your local cybercrime unit and update your device’s security software immediately. Use protection solutions with anti-phishing capabilities, such as Kaspersky Premium for individuals and Kaspersky Security for Mail Server for organisations, to decrease the chance of infection through a phishing email.
