We’ve had 10 clients in 1 day with the same query, so YES, there is an active extortion campaign demanding $2000 in bitcoins or they will “publish your data” because you have visited porn websites.
You may receive it in English, Spanish… the first phrase is “your password,” and indeed, it was or still is, depending on whether you had changed it between the time of the hack, the publication, and now.
Let’s ignore it and do what we always do:
What We Should Do
1) Change your password (you can check if your email is being published along with your password at haveibeenpwned.com)
2) Activate two-factor authentication / two-step verification. Here’s how to activate it on each social network, email, or payment system:
- how to activate two-step verification on Hotmail
- how to activate two-step verification on Gmail
- how to activate two-step verification on Yahoo
- how to activate two-step authentication on Facebook
- how to activate two-step verification on Twitter
- how to activate two-step verification on Instagram
- how to activate two-step verification on PayPal
- how to activate two-step verification on Amazon
- how to activate two-step verification on Glovo
- how to activate two-step verification on Wallapop
- how to activate two-factor authentication on Netflix
- how to activate two-step verification on HBO
- Spotify
3) Do not click on any links
4) Mark the email address as spam.
ESET warns us on its blog that blackmail is trending and increasing disproportionately.
If you are still uneasy, you can contact us for advice.