Finta richiesta di pagamento in bitcoin da parte della CIA

Non contenti delle decine di varianti delle mail di richiesta pagamento in bitcoin a fronte di minaccia di divulgazione materiale privato, i criminali hanno avviato in questi giorni una massiccia campagna d’invio mail che sembrano provenire dalla CIA (Central Intelligence Agency) e, con l’accusa di un fascicolo aperto a carico del ricevente per possesso di materiale pornografico ritraente minori, richiede il pagamento di cifre che vanno dai 5 ai 10.000 dollari in Bitcoin e Bitcoin Cash.

La mail suona più o meno sempre allo stesso modo, il mittente si presenta come un Agente della CIA e spiega il motivo del messaggio: durante una indagine per pedopornografia per la quale a breve scatteranno migliaia di arresti in oltre 27 Stati, è emerso il nome del ricevente della mail ed è chiaro che non c’entra nulla con l’indagine, motivo per il quale l’agente si rende disponibile a rimuoverlo dai sospettati e cancellare i suoi dati presenti nel fascicolo, a fronte del pagamento di una modica cifra di alcune migliaia di dollari.

Ovviamente, come per gli altri casi, ribadiamo che non si tratta di una minaccia reale e quindi il consiglio come al solito è quello di non pagare e cancellare il messaggio.

Girano al momento email che richiedono il pagamento del “riscatto” in Bitcoin, come questa:

Case #15298376
Distribution and storage of pornographic electronic materials involving underage children.
   
   
My name is Elda Fierro and I am a technical collection officer working for Central Intelligence Agency.
   
It has come to my attention that your personal details including your email address are listed in case #15298376.
   
The following details are listed in the document’s attachment:
   
Your personal details,
Home address,
Work address,
List of relatives and their contact information.
   
   
Case #15298376 is part of a large international operation set to arrest more than 2000 individuals suspected of paedophilia in 27 countries.
   
The data which could be used to acquire your personal information:
   
Your ISP web browsing history,
DNS queries history and connection logs,
Deep web .onion browsing and/or connection sharing,
Online chat-room logs,
Social media activity log.
   
The first arrests are scheduled for April 8, 2019.

   
Why am I contacting you ?
   
I read the documentation and I know you are a wealthy person who may be concerned about reputation.
   
I am one of several people who have access to those documents and I have enough security clearance to amend and remove your details from this case. Here is my proposition.
   
Transfer exactly $10,000 USD (ten thousand dollars – about 2.5 BTC) through Bitcoin network to this special bitcoin address:
   
3BW8TES5hYyV218uDskxVUgMPJCKrexXMb
   
You can transfer funds with online bitcoin exchanges such as Coinbase, Bitstamp or Coinmama. The deadline is March 27, 2019 (I need few days to access and edit the files).
   
Upon confirming your transfer I will take care of all the files linked to you and you can rest assured no one will bother you.
   
Please do not contact me. I will contact you and confirm only when I see the valid transfer.
   
Regards,
Elda Fierro
   
Technical Collection Officer
Directorate of Science and Technology
Central Intelligence Agency

Oltre ai Bitcoin, vi sono email che invece chiedono il versamento del riscatto su indirizzo bitcoin bech32:

Case #26786780
Distriьution and storage of pornographic electronic materials involving underage children.
My name is Nasir Cumming and I am a technical collection officer working for Central Intelligence Agency.
It has come to my attention that your personal details including your email address are listed in case #26786780.
The following details are listed in the document’s attachment:
• Your personal details,
• Home address,
• Work address,
• List of relatives and their contact information.
Case #26786780 is part of a large international operation set to arrest more than 1700 individuals suspected of paedophilia in 27 countries.
The data which could ьe used to acquire your personal information:
• Your ISP weь ьrowsing history,
• DNS queries history and connection logs,
• Deep weь .onion ьrowsing and/or connection sharing,
• Online chat-room logs,
• Social media activity log.
The first arrests are scheduled for April 18, 2019.
Why am I contacting you?
I read the documentation and I know you are a wealthy person who may ьe concerned aьout reputation.
I am one of several people who have access to those documents and I have enough security clearance to amend and remove your details from this case.Here is my proposition.
Transfer exactly $5,000 USD (five thousand dollars – aьout 1.4 BTC) through Bitcoin network to this special ьitcoin address: bc1qxrmrujfy0esq76e94pv5rr3fjxlxt35uz8nywr
You can transfer funds with online ьitcoin exchanges such as Coinьase,Bitstamp or Coinmama.The deadline is March 24, 2019 (I need few days to access and
edit the files).
Upon confirming your transfer I will tak
e care of all the files linked to you and you can rest assured no one will ьother you.
Please do not contact me.I will contact you and confirm only when I see the valid transfer.
Regards,
Nasir Cumming
Technical Collection Officer
Directorate of Science and Technology
Central Intelligence Agency