Phishing Alert

From: *Foreign Alphabet <***@gmail.com>

Subject: Your mailbox exists, so read the letter carefully

Message:

I also have access to all your contacts and all your correspondence.

Why did not your antivirus detect malware?
Answer: My malware uses a driver, I update its signatures every 4 hours so that its antivirus is silent.

I made a video that shows how satisfied you are in the left half of the screen and in the right half you see the video you saw. With a click of the mouse, I can send this video to all your emails and contacts on social networks.

I can also post access to all your emails and instant messengers that you use.

If you want to avoid this, transfer the sum of $488 to my bitcoin address (if you do not know how to do it, write to Google :”Buy Bitcoin”).

My bitcoin address (BTC Wallet): 35MJPZrPRqBy5mEkPVchWTG7QrqxgsBgG

After receiving the payment, I will delete the video and you will never listen to me again.

I give you 48 hours to pay.

If have a notification that this letter has been read and the timer will work when you see this letter.

Filing a complaint anywhere does not make sense because this email can not be tracked as my bitcoin address.

I do not make any mistake.

If I discover that you have shared this message with another person, the video will be distributed immediately.

My best wishes.

Additional Information:

UNC is the target of a bitcoin phishing scam. Users are tricked into believing incriminating or embarrassing videos have been secretly collected on their computers. The FBI and various security organizations have recently issued users of this scam. If you would like more information on the Bitcoin/Sextortion scam, please visit the Electronic Frontier Foundations article: Sextortion Scam: What to Do If You Get the Latest Phishing Spam Demanding Bitcoin. 

If you, or someone in your department, receives this message, please right click on the message. Find the "junk" option. Then, Block Sender. This will flag the message with Microsoft 365 Advanced Threat Protection and help block the email addresses associated with the "*.unco@gmail.com" extensions that are being sent to UNC's campus. Finally, delete the message. 

If you are a victim of this scam, you should: