Collection of Extortion/Ransom-Mails

Fancy Lazarus

  • Date: 2020/2021
  • Distribution: worldwide
  • Cause: DDoS, Ransomware
  • Threat: Real

References:

We are the Fancy Lazarus and we have chosen Blacknight Internet Solutions as target for our next DDoS attack.

Please perform a google search to have a look at some of our previous work. Also, perform a search for "NZX DDoS" or "New Zealand Stock Exchange DDoS" in the news. You don't want to be like them, do you?

Your whole network will be subject to a DDoS attack starting in 7 days on Thursday next week. (This is not a hoax, and to prove it right now we will start a small attack on a few random IPs from your AS39122 block that will last for about 2 hours. It will not be a heavy attack, and will not cause you any damage, so don't worry at this moment. We are attacking you with 10 out of 117 of our servers, so do the math.)
There's no counter measure to this, because we will be attacking your IPs directly and our attacks are extremely powerful (peak over 2 Tbps)

This means that your websites and other connected services will be unavailable for everyone. Please also note that this will severely damage your reputation among your customers who use online services.
And worst of all you will lose Internet access in your offices too.

We will refrain from attacking your network for a small fee. The current fee is 0.5 Bitcoin (BTC). It's a small price for what will happen when your whole network goes down. Is it worth it? You decide!

We are giving you time to buy Bitcoin if you don't have it already.

If you don't pay the attack will start and the fee to stop will increase to 1 BTC and will increase by 0.5 Bitcoin for each day after the deadline that passed without payment.

Please send Bitcoin to the following Bitcoin address: 18DmLkqBKJD3mMakz2yvrFbNSkMD2N5iXL

Once you have paid we will automatically get informed that it was your payment.
Please note that you have to make payment before the deadline or the attack WILL start!

If you decide not to pay, we will start the attack on the indicated date and uphold it until you do. We will completely destroy your reputation and make sure your services will remain offline until you pay.

Do not reply to this email, don't try to reason or negotiate, we will not read any replies.

Once you have paid we won't start the attack and you will never hear from us again.

Please note we will respect your privacy and reputation, so no one will find out that you have complied.
  • Bitcoins: 18DmLkqBKJD3mMakz2yvrFbNSkMD2N5iXL

Team XBall

  • Date: 2017-06-15
  • Distribution: weltweit
  • Cause: DDoS, Ransomware
  • Threat: Copycat/Trittbrettfahrer

References:

We are the Team Xball and we have chosen your website/network as target
for our next DDoS attack.

Unfortunately your data was leaked in the recent hacking of the web site
and we now have your information.
We have DataBase tax forms, DOB, Names, Addresses, Credit card details,
bank account full details and more sensitive data.
Now, we can publish your details and your clients online who would
damage the rating of the company
and would create many problems for you.
On Friday 16_06_2017_7:00p.m. GMT !!! We begin to attack your network
servers and computers
We will produce a powerful DDoS attack - up to 250 Gbps
All data will be encrypted on computers Crypto-Ransomware
You can stop the attack beginning, if payment 1 bitcoin (2900 $).
Do you have time to pay. If you do not pay before the attack 1 bitcoin
the price will increase to 10 bitcoins

Please send the bitcoin to the following Bitcoin address:
16KrZEhHEEL6RSrXviAF6nnGMkuYYAAQQ5
Once you have paid we will automatically get informed that it was your
payment.

What if I dont pay?
If you decide not to pay, we will start the attack at the indicated date
and uphold it until you do, theres no counter measure to this, you will
only end up wasting more money trying to find a solution. We will
completely destroy your reputation amongst google and your customers and
make sure your website will remain offline until you pay. We can publish
your DataBase.

This is not a hoax, do not reply to this email, dont try to reason or
negotiate, we will not read any replies. Once you have paid we wont
start the attack and you will never hear from us again!
Please note that Bitcoin is anonymous and no one will find out that you
have complied.

BTC-Adressen

HACKER TEAM - Meridian Collective

  • Datum: 2017-06-14
  • Distribution: weltweit
  • Cause: DDoS, Ransomware
  • Threat: Copycat/Trittbrettfahrer

Referenzen

PLEASE FORWARD THIS EMAIL TO SOMEONE IN YOUR COMPANY WHO IS ALLOWED TO MAKE IMPORTANT DECISIONS!
We are the Meridian Collective and we have chosen your website/network as target for our next DDoS attack.
1 - We checked your security system. The system works is very bad
2 - On Friday 16_06_2017_8:00p.m. GMT !!! We begin to attack your network servers and computers
3 - We will produce a powerful DDoS attack - up to 300 Gbps
4 - Your servers will be hacking the database is damaged
5 - All data will be encrypted on computers Crypto-Ransomware
4 - You can stop the attack beginning, if payment 1 bitcoin to bitcoin ADDRESS: 1HgGf2BCRkBmJNy13oWPo267bq7Lp17Djr
5 - Do you have time to pay. If you do not pay before the attack 1 bitcoin the price will increase to 5 bitcoins
6 - After payment we will advice how to fix bugs in your system
Please send the bitcoin to the following Bitcoin address:
1HgGf2BCRkBmJNy13oWPo267bq7Lp17Djr
Once you have paid we will automatically get informed that it was your payment.
How do I get Bitcoins?
You can easily buy bitcoins via several websites or even offline from a Bitcoin-ATM. We suggest you to start with localbitcoins.com or do a google search.
What if I don’t pay? If you decide not to pay, we will start the attack at the indicated date and uphold it until you do, there’s no counter measure to this, you
will only end up wasting more money trying to find a solution. We will completely destroy your reputation amongst google and your customers and make
sure your website will remain offline until you pay. This is not a hoax, do not reply to this email, don’t try to reason or negotiate, we will not read any
replies. Once you have paid we won’t start the attack and you will never hear from us again! Please note that Bitcoin is anonymous and no one will find out that you have complied.

BTC-Adressen:

  • 14fKPXrkBdjUJZ9HPTXL45u3SmzERxQvox
  • 1C6nKRo72UYxhVz7ejwHNS4pBuSbfoe1Q7
  • 1HgGf2BCRkBmJNy13oWPo267bq7Lp17Djr
  • 1Kj69yhhWpJaWo9s3MZW6ZztcCjeeakdFW




Fragen? Kontakt: info@zero.bs