Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From christian.gabriel@ift-informatik.de  Sat Dec  1 21:29:22 2018
Return-Path: <christian.gabriel@ift-informatik.de>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id CF55C3D200056; Sat,  1 Dec 2018 21:29:22 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Sat, 01 Dec 2018 21:29:22 +0100
From: "Account Security" <christian.gabriel@ift-informatik.de>
To: <christian.gabriel@ift-informatik.de>
Subject: *****SPAM***** Third party accessed to christian.gabriel@ift-informatik.de.
Date: Sun, 02 Dec 2018 05:59:15 +0400
Message-Id: <5C033C73.6010407@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.4 required=5.0 tests=BAYES_00,DATE_IN_FUTURE_03_06,
	RCVD_IN_BRBL_LASTEXT,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RDNS_NONE,URIBL_BLOCKED
	autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5C02EF22.5492852B"

This is a multi-part message in MIME format.

------------=_5C02EF22.5492852B
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Hello! I'm is very good programmer, known in darkweb as bruno39.
   I hacked this mailbox more than six months ago, through it I infected your
   operating system with a virus (trojan) created by me and have been spying
   for you a very long time. [...] 

Content analysis details:   (7.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.0 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [103.95.120.16 listed in psbl.surriel.com]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                            [103.95.120.16 listed in bl.score.senderscore.com]
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: ift-informatik.de]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [103.95.120.16 listed in bb.barracudacentral.org]
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0002]
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS



------------=_5C02EF22.5492852B
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from [103.95.120.16] (unknown [103.95.120.16])
	by ift-informatik.de (Postfix) with ESMTP id B41243D200056
	for <christian.gabriel@ift-informatik.de>; Sat,  1 Dec 2018 21:29:20 +0100 (CET)
Message-ID: <5C033C73.6010407@ift-informatik.de>
Date: Sun, 02 Dec 2018 05:59:15 +0400
From: "Account Security" <christian.gabriel@ift-informatik.de>
User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:16.0) Gecko/20121011 Thunderbird/16.0.1
MIME-Version: 1.0
To: <christian.gabriel@ift-informatik.de>
Subject: Third party accessed to christian.gabriel@ift-informatik.de.
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hello!

I'm is very good programmer, known in darkweb as bruno39.
I hacked this mailbox more than six months ago, 
through it I infected your operating system with a virus (trojan) created by me and have been spying for you a very long time.

I understand it is hard to believe, but you can check it yourself.
I'm sent this e-mail from your account. Try it yourself. 

Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.

I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.

I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!

During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!

I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $211 is quite a fair price to destroy the dirt I created.

Send the above amount on my BTC wallet (bitcoin): 1JRCbCH9E3iLhSXPTqtkgfAsJNT2xD74C5
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.

Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it!

Since reading this letter you have 48 hours!
After your reading this message, I'll receive an automatic notification that you have seen the letter.

I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!


------------=_5C02EF22.5492852B--