Listen to the episode
TLDR
Cybercriminals are sending sextortion emails that impersonate the ShinyHunters extortion group, using email addresses exposed in earlier data breaches (Amtrak, Hallmark, Substack, CarGurus, ADT, Panera Bread, McGraw Hill) to make the...
How it works
Cybercriminals are sending sextortion emails that impersonate the ShinyHunters extortion group, using email addresses exposed in earlier data breaches (Amtrak, Hallmark, Substack, CarGurus, ADT, Panera Bread, McGraw Hill) to make the...
Red flags
- Claims of remote device, camera, and microphone access with no actual proof provided. Unsolicited Bitcoin payment demand with a short 48 hour deadline and warnings not to contact police. The named breach is real, but having an email in an old leak does not mean your device was hacked
What to do
- 1Do not pay, reply, or reset your device in response to the email. Verify the claim independently by checking haveibeenpwned.com for your email exposure history. Report the message to your local cybercrime authority and your email provider, then delete it
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam/FAQ
Is ShinyHunters sextortion scam demands 2000 dollars in Bitcoin using leaked breach data a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Claims of remote device, camera, and microphone access with no actual proof provided. Unsolicited Bitcoin payment demand with a short 48 hour deadline and warnings not to contact police. The named breach is real, but having an email in an old leak does not mean your device was hacked
What should I do first?
Do not pay, reply, or reset your device in response to the email. Verify the claim independently by checking haveibeenpwned.com for your email exposure history. Report the message to your local cybercrime authority and your email provider, then delete it
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.