What is “Your Account Was Hacked” email scam

“Your Account Was Hacked” email scam is a sextortion scam that tries to scare users into thinking that a private video of them exists and will be released publicly if payment is not made. The reason this email and similar ones are classified as sextortion scams is that the mentioned video does not exist. Thus, if you receive this particular email or similar ones, you can simply delete them from your inbox.

 

Sextortion emails use eye-catching subject lines to intrigue users enough to at least open the emails. It can be anything, from things like “You have an outstanding payment” to “I hacked your computer”. The first lines are meant to trigger users’ anxiety, so they’re usually some variation of “Your account was hacked” and “Your password is xxx”.

Once scammers have caught users’ attention, they then try to scare them further. This particular email claims that your email has been hacked, which somehow gave hackers access to your computers/devices. The “hacker” was then able to install malware on your computer and supposedly noticed you visiting adult websites. And according to the email, the hacker then made a dual video via your webcam of you watching pornography. The video supposedly shows you on one side and the video you’re watching on the other. The email also claims that your information, including contacts, has been stolen. The hacker threatens to send the video to all contacts if you refuse to pay $1000.

Sextortion emails are usually written in a mocking tone to make the recipient feel ashamed. This is a very common characteristic in these emails because it pressures users to at least consider paying the requested money.

But there’s no need to pay anything because there is no video. This email is nothing more than a scam. If you take the time to read through the email with a clear head, you will notice that none of the claims make sense. The email claims that hacking your email account somehow gave hackers access to your devices. That’s not how malware works.

Your account was hacked! Renew the pswd right away!
You probably do not know me me and you may be certainly wanting to know for what reason you’re receiving this message, right?
I’m ahacker who burstyour emailand devices and gadgetsnot so long ago.
Do not attempt to msg me or alternatively try to find me, it is definitely hopeless, because I sent you a letter from YOUR hacked account.
I installed spyware on the adult vids (porno) website and suppose you enjoyed this site to enjoy it (you know what I mean).
During you have been watching content, your browser started out operating as a RDP (Remote Control) that have a keylogger that granted me authority to access your desktop and webcam.
Afterward, my programobtainedall information.
You have typed passcodes on the websites you visited, I caught all of them.
Surely, you could possibly change each of them, or perhaps already modified them.
But it really doesn’t matter, my malware renews it every time.
And what did I do?
I compiled a reserve copy of every your system. Of all files and personal contacts.
I got a dual-screen video recording. The 1st section demonstrates the video you were observing (you’ve got a good preferences, ahah…), the second screen demonstrates the movie from your camera.
What should you do?
Great, in my opinion, 1000 USD is basically a reasonable amount of money for this little riddle. You’ll do the deposit by bitcoins (in case you don’t understand this, go searching “how to purchase bitcoin” in any search engine).

If you’re wondering how these scammers were able to get your email address, it’s likely been leaked by some service you used your email to register for. Email addresses are leaked all the time, and that’s why you receive spam. Leaked/hacked email addresses end up on hacker forums, from where cybercriminals buy them.

In some cases, sextortion emails are made to look like they were sent by users’ accounts, which would indicate that hackers indeed have access to the email account. However, scammers simply use a method known as spoofing to essentially make an email address appear like it’s something else. So even if you receive a sextortion email seemingly sent from your account, it does not mean your account has been hacked.

Why do sextortion emails contain passwords?

Scammers have started including users’ passwords in their emails as another attempt to alarm users enough to transfer money. Users would obviously become very anxious if a threatening email contained a password they use, so it’s a somewhat effective scare tactic. However, there is a very simple explanation for how scammers get access to users’ passwords. And it has nothing to do with hacking, or rather nothing to do with your hacking computer.

The reason scammers have passwords is that they buy them from hacker forums the same way they do email addresses. It’s not uncommon for passwords to get leaked by services that do not have good security. And once they’re leaked, they usually end up on various hacker forums. Malicious actors can buy entire databases full of email addresses and passwords to use for their malicious purposes.

You can check on haveibeenpwned whether your password has been leaked, though there’s not much you can do if has. You should also check whether your email address has been leaked so you know to be very cautious with unsolicited emails.

UK’s NCSC guidelines explaining what to do if you receive a sextortion email

Your Account Was Hacked email scam removal

If a sextortion email lands in your inbox, you can simply delete it without paying attention to any of its contents. There is no video, nor has your computer been infected with malware. This is nothing more than a sextortion email.

It’s worth mentioning that some sextortion emails have attachments and links. If you ever open such attachments, make sure to immediately scan your computer with anti-malware software because you could have infected your computer with malware. And links in malicious emails usually lead to phishing websites.