I think I've been hacked. While checking my email, I found a message in my junk folder that appeared to be from myself. It claimed someone had purchased my email and password online and was using something called Cobalt Strike to access my email, laptop camera, and audio. The sender threatened to release footage of me visiting adult websites if I didn't pay them $1,500 in Bitcoin within 2 days. I've received similar emails in the past, but they didn't escalate, and I managed to change my password without any issues. This one feels more serious, though. I've already changed my password and am using the Microsoft Authenticator app. I also ran a virus scan and plan to do an offline scan. What else should I do to ensure my security?
5 Answers
Sounds like a typical sextortion scam. They often use spoofing to make it look like the email is from you. Since you changed your passwords and enabled two-factor authentication, you're doing great! Just don't engage with them or make any payments. Checking if your email shows up in breach databases can also give you peace of mind.
It sounds like you've received a scam email. Just ignore it and change your passwords to be safe. Make sure you're using strong, unique passwords for each account you have.
These types of scam emails are pretty common. They usually don't have any actual evidence and just rely on fear. If you check the email properties, you might find more information about the sender's legitimacy.
Thanks! I'll definitely be more careful going forward.
Anyone can spoof an email address. You weren't hacked; just delete it and move on. These scammers prey on fear and often don’t know anything about you.
Thanks for that reassurance! I was worried my email was compromised.
Your email provider likely recognized it as a scam, which is why it ended up in your spam folder. You're probably safe!
Thank you! I'll do that ASAP.