-
Patch Lady – do they think this will work?
Over the weekend here at the office nearly every mailbox (including ones that aren’t public) got “I saw what you did and now send me bitcoin” threatening emails. The interesting part to me isn’t that I received the emails (phishing and threating emails are pretty common these days), nor honestly was it that I got it to some “non public” mailboxes. It’s also pretty common for attackers to use enumeration tools that are pretty well known in the attack community to harvest email address. No to me what was surprising was that someone thought someone would fall for this.
Emails were addressed to a number of names. Date was in the “foreign” not USA format. Misspelled words. And certainly last but not least, merely providing the bitcoin wallet number to your attackees isn’t a good way to ensure you will be paid.
Seriously attackers, if you want to get me, you need to get better than this. You need to ensure that the email is plausible and provide an easy way to receive payment. I guess if you send out enough and some people respond it’s worth it, but really?
(note I’m not linking the email due to the profanity in the email).