I have to share bad news with you EMAIL SCAM (Virus removal guide)

What is I have to share bad news with you EMAIL?

I have to share bad news with you is a new ‘sextortion’ scam that spreads through spam email campaigns, as well as through WhatsApp. This scam email attempts to immediately grab the user’s attention with the following header: Payment from your account. But this is just a new version of the ‘sextortion’ email scam, which, like most sextortion scams, relies on “social engineering”, a process through which the scammers induce shame, panic or guilt. The scammers (authors of the email) claim that they obtained material compromising the user (as a result of a computer hack, email account hack, router hack, etc) and threaten to publish it if the ransom is not paid. All these claims are not based on anything, they are just deception. Therefore, you can safely ignore this email, just delete it or move it to spam.
 

“I have to share bad news with you” email is a SCAM

QUICK LINKS

• What is I have to share bad news with you EMAIL?
• Should you pay?
• What to do when you receive the email scam?
• Updates

The “I have to share bad news with you” email says that for several months now someone has full access to the email recipient’s computer and other devices. This attacker claims that he was able to install a Trojan on the victim’s computer, which allowed him to take full control of the computer and record a video in which the victim masturbates while browsing adult websites. The hacker threatens to send this video to the victim’s family and friends unless the victim pays him $1650. If the victim pays the required amount in Bitcoin, the hacker promises to delete all the data. Next, the scam email contains the bitcoin address to which the ransom should be transferred. This email is just a sextortion scam, all statements are fake. Just ignore this email and other similar emails and emails containing similar content.

Text presented in the “I have to share bad news with you” message:

Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which you use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:
Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account (xxxxxxxxxxxxxxxx).

One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links from your inbox emails).
All ingenious is simple. =)

This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history to my servers.
I have access to all your messengers, social networks, emails, chat history and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until this letter…

While gathering information about you, I have discovered that you are a big fan of adult websites.
You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don’t want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.

Let’s settle it this way:
You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.

This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.
In case, if you don’t know how to purchase and transfer the bitcoins – you can use any modern search engine.

Here is my bitcoin wallet: 1L6XxPRuLJdr6JCqw8dwNUm1wFLisrGREL

You have less than 48 hours from the moment you opened this email (precisely 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated the return address).
*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) – your video will be shared to public right away.
*Don’t try to find me – it is absolutely pointless. All the cryptocurrency transactions are anonymous.
*Don’t try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.

Things you don’t need to worry about:
*That I won’t be able to receive your funds transfer.
– Don’t worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer.
– Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!

Everything will be done in a fair manner!

One more thing… Don’t get caught in similar kind of situations anymore in future!
My advice – keep changing all your passwords on a frequent basis

What is Sextortion email scam

Sextortion is the practice of extorting money from victims by blackmailing them; threatening to reveal evidence of their sexual activity. It is an old scam scheme – which try to guilt people into paying off someone claiming to have secretly recorded video or compromising information. Scammers use a database of stolen email to send out scam emails to to millions of people around the World. The messages are sent to email addresses exposed in previous known data breaches in which the user database (email address and/or password) was indexed online.

The “I have to share bad news with you” scam (Animated-GIF):

Should you pay?

The best advice is: Don’t pay the ransom! If you receive the sextortion email scam, just ignore the scammers’ empty threats. The best way to deal with the scam email is simply to move it to trash!

Looks like the scammers have already received several payments

Threat Summary

I have to share bad news with you SCAM # Dutch variant

This variant of the scam targets german users.

Ik heb slecht nieuws voor je EMAIL SCAM

I have to share bad news with you SCAM # Hungarian variant

This variant of the scam targets hungarian users. Subject line: “Fizetési kötelezettség terheli számláját. Kérjük, rendezze tartozását.”.

What to do when you receive the I have to share bad news with you SCAM

We advice to someone who gets this fraudulence message:

• Do not panic.
• Do not pay a ransom.
• If there’s a link in the scam email, do not click it, otherwise you could unwittingly install malware or ransomware on your computer.
• Report the email spam to the FTC at https://www.ftc.gov/
• Scan your computer for malware.
• Install an anti-phishing software.

How to scan your PC for malware

Zemana Anti Malware (ZAM) is a lightweight utility which designed to use alongside your antivirus software, detecting and removing malicious software, adware and PUPs that other applications miss. Zemana Anti Malware is easy to use, fast, does not use many resources and have great detection and removal rates.

1. Installing Zemana Anti Malware is simple. First you’ll need to download it on your computer by clicking on the link below.
   
   

   Zemana AntiMalware
   156622 downloads
   Author: Zemana Ltd
   Category: Security tools
   Update: July 16, 2019
   
2. Once you have downloaded the setup file, make sure to double click on the Zemana.AntiMalware.Setup. This would start the Zemana installation on your PC.
3. Select installation language and click ‘OK’ button.
4. On the next screen ‘Setup Wizard’ simply click the ‘Next’ button and follow the prompts.
   
5. Finally, once the installation is finished, Zemana will run automatically. Else, if doesn’t then double-click on the Zemana icon on your desktop.
6. Now that you have successfully install Zemana, let’s see How to use it to detect and remove malware from your computer.
7. After you have started the Zemana AntiMalware (ZAM), you’ll see a window as shown on the image below, just click ‘Scan’ button to perform a system scan with this tool for malicious software.
   
8. Now pay attention to the screen while Zemana scans your computer.
   
9. Once Zemana finished scanning, it will display a list of security threats found by the scan. Once you’ve selected what you wish to remove from your PC click ‘Next’ button.
   
10. Zemana Anti Malware may require a reboot computer in order to complete the malware removal procedure.
11. If you want to permanently remove malicious software from your PC, then click ‘Quarantine’ icon, select malware, adware, PUPs and other threats and click Delete.
12. Reboot your personal computer to complete the malware removal process.

If you are having issues with malware removal, then check out MalwareBytes. We recommend this free malware removal utility because it can easily delete trojans, spyware, browser hijackers, adware, potentially unwanted programs and malicious browser toolbars with all their components such as files, folders and registry entries. Visit the page linked below to download the latest version of MalwareBytes for Windows.

Malwarebytes Anti-malware
312869 downloads
Author: Malwarebytes
Category: Security tools
Update: April 15, 2020

We suggest you look at the following video, which completely explains the process of using the MalwareBytes to remove malicious software.

How to protect yourself from phishing, malicious and scam sites

If you want to protect yourself from scam, phishing and malicious websites, then install an ad blocker tool such as AdGuard. It can block malicious and misleading sites, stop unwanted advertisements and scam pop-ups when using the Internet Explorer, Google Chrome, Firefox and Edge. So, if you like surf the Internet, and want to protect your computer, then AdGuard is your best choice.

Installing the AdGuard is simple. First you’ll need to download AdGuard by clicking on the link below.

Adguard download
24959 downloads
Version: 6.4
Author: © Adguard
Category: Security tools
Update: November 15, 2018

After downloading it, double-click the downloaded file to start it. The “Setup Wizard” window will show up on the computer screen as displayed below.

Follow the prompts. AdGuard will then be installed and an icon will be placed on your desktop. A window will show up asking you to confirm that you want to see a quick guide as displayed on the screen below.

Click “Skip” button to close the window and use the default settings, or press “Get Started” to see an quick guidance which will assist you get to know AdGuard better.

Each time, when you start your system, AdGuard will start automatically and stop unwanted advertisements, block phishing, as well as other harmful or misleading websites. For an overview of all the features of the application, or to change its settings you can simply double-click on the AdGuard icon, which can be found on your desktop.

Updates

Update, 13 April 2021. Discovered a new version of this scam aimed at Spanish users. Ransom amount: $750, Bitcoin wallet: 1H9sA9Che7bdg4SVrAjj8jwUyvK9A3cnQC.

I have to share bad news with you – Spanish version

Text presented in this scam email:

¡Saludos!

Tengo malas noticias para usted.
Desde hace aproximadamente unos meses tengo acceso a los dispositivos que utiliza para navegar por Internet.
Durante ese tiempo, he estado rastreando toda su actividad en la web.

Esta es la secuencia de acontecimientos:
Hace algún tiempo, compré el acceso a varias cuentas de correo electrónico a unos hackers (hoy en día es bastante fácil comprar esas cosas en Internet).
De esa forma, pude acceder fácilmente a su cuenta de correo electrónico (xxx@xxxxxxx).

Una semana después, ya había instalado un troyano en los sistemas operativos de todos los dispositivos que utiliza para acceder a su correo electrónico.
De hecho, no fue nada difícil (ya que usted pinchaba en los enlaces desde su bandeja de entrada).
Tan sencillo como ingenioso. =)
[…]

Update, 02 April 2021. Discovered a new version of this scam aimed at Korean users. Ransom amount: 2000000 won, Bitcoin wallet: 1FD71hUPhsi7hLarvx5ueBxaeEHYfp8o7H.

I have to share bad news with you – Korean version

Text presented in this scam email:

안녕하세요!

귀하에게 나쁜 소식 하나를 전합니다.
저는 몇 달 전에 귀하가 인터넷 검색에 사용하는 장치에 액세스할 수 있었습니다. 그 후, 귀하의 인터넷 활동을 추적하기 시작했습니다.

다음은 이벤트 결과입니다: 해커로부터 얼마 전 이메일 계정의 액세스 권한을 구매하였습니다. (요즘에는 온라인에서 이메일 계정을 구입하는 것은 매우 간단합니다). 물론 귀하의 이메일 계정에 (***@*****) 쉽게 로그인할 수 있었습니다.

일주일이 지난 후, 귀하의 이메일에 액세스하는 데 사용하는 모든 장치의 트로이 목마 바이러스를 운영 체제에 설치했습니다. 사실 전혀 어렵지 않았습니다. (받은 편지함의 이메일 링크로 연결되기 때문입니다.)
모든 독창성은 존나 간단하답니다. =)
[…]

Update, 17 March 2021. Discovered a new version of this scam aimed at Italian users. Ransom amount: 1200 EUR, Bitcoin wallet: 15NQNgBXsTjdmXEaobxKJdk6d18FerjSuW. Scam email subject line: Pagamento dal tuo conto.

I have to share bad news with you – Italian version

Text presented in this scam email:

Saluti!

Ho una cattiva notizia per te.
Alcuni mesi fa sono riuscito ad accedere ai dispositivi che usi per navigare su Internet e ho cominciato a monitorare le tue attività in rete.

Ecco la sequenza degli eventi:
Qualche tempo fa ho acquistato dagli hacker l’accesso ad alcuni account e-mail (oggigiorno è abbastanza semplice procurarsi questo genere di cose online).
Ovviamente, sono riuscito ad entrare senza problemi nel tuo account di posta elettronica (*******).

Una settimana dopo ho installato il virus Trojan nei sistemi operativi di tutti i dispositivi che usi per accedere alla tua posta.
A dire il vero non è stato affatto difficile (dato che seguivi i link dalle mail della tua posta in arrivo).
Semplice e geniale =)

Update, 11 March 2021. Discovered a new version of this scam aimed at Polish users. Ransom amount: 1250 EUR, Bitcoin wallet: 1Ps2HsbfZ9yuCyFzWdWFwMgnHGgs9Bnv5h, 17sJ89mf4ZLaMfrw9obMDAGptoTFzPBqmX.

I have bad news to share with you – Polish variant

Update, 29 Jule 2021. A new version of this scam has been discovered. It uses Greek characters to prevent detection by spam filters. Ransom amount: 1 BTC, Bitcoin wallet: 1EyHdezy96MfBpHxQc2aULtUe8t4jE4Nu4, 1NLXkAJ7qkRv59fC5AsJr8rAP7GYqFWNjf.

ι ңave to shαгe вąd пeщs աith уou. αρproҳιmatelү α few ʍσnthʂ ago, ι gąined acсess to үσuг devιсeʂ, whicң you υse fσг ιηteгпet bɾowʂιпg. ąfteɾ tңαt, ι ңaѵe ʂtąгted tгacƙing үσuг inteгпet αctιѵitieʂ.
[…]

Finish words

We hope that this article helped you understand what the “I have to share bad news with you” SCAM is and not succumb to the threats of scammers. If you receive an email that is similar but not the same as the example above, make sure you remove any personal info in this message, then post it as comment on this article. It will help our team monitor the latest scams.