Skip to content
July 6, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • Hackers use social engineering technique to extortion of bitcoin
  • Cyber Security

Hackers use social engineering technique to extortion of bitcoin

Do Son July 18, 2018 2 minutes read
social engineering technique
Add Daily CyberSecurity as a preferred
source on Google

Although the overall price of virtual currency has fallen sharply from the beginning of the year, it has not affected the confidence of global virtual currency supporters and hackers.

Earlier we mentioned that the overall computing power of virtual currency continued to increase significantly compared with the beginning of the year, which means that more virtual currency miners purchase equipment to improve mining efficiency.

Hackers and spammers are always actively. The latest scam is threatening public users by using privately record to extortion of bitcoin.

Emin Gün Sirer a professor of computer science at Cornell University in New York, USA, shared messages sent by hackers or spammers on Twitter.

Yeah, how is the conclusion being drawn that it’s related to @haveibeenpwned? I can’t see anything to indicate that.

— Troy Hunt (@troyhunt) July 11, 2018

The hacker in the email claimed to have implanted malware on the user’s computer, stealing the user’s social account password and web browsing history through malware.

At the same time, the device’s front camera is turned on to capture the user’s picture of something unspeakable, so the user must pay Bitcoin to his wallet address.

If the user does not pay within one day of receiving the email, the hacker will send the incredible picture and the adult website browsing record to your friends.

Of course, most people who receive such emails may ignore it and ignore it, but for some users who are not familiar with the computer, they may be deceived.

For improving credibility, the hacker also queries the publicly leaked database for the account password associated with the user’s email address and attaches it to the email.

Users who are so unclear will see that their real password will be recorded as some uncharacteristic pictures, so they can only choose to pay for the face.

Of course, there are not many users of hackers who are widely involved in the fraudulent means of netting. Therefore, the hacker lion has asked the user to pay a ransom of $1,900.

This amount is much higher than the conventional crypto-ransomware. Usually, the ransomware for ordinary users will only ask for a ransom of $200 to $300.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.


We respect your inbox. Unsubscribe anytime.

Related coverage

  • MuddyWater’s Sneaky New Tactic: Hijacking RMM Software for Espionage
  • China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2
  • From Taiwan to Korea: TIDRONE Threat Actor Targets ERP Software
  • China Targets U.S. Tech Startups through Investments, NCSC Reveals
  • Decade of Stealth: China-Linked TA-ShadowCricket Targets Asia-Pacific

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: social engineering

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-20896CVSS 9.8
    Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`
    Admin intel📅 Updated: Jul 6, 2026
  • CVE-2026-48282CVSS 10.0
    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted...
    Admin intel📅 Updated: Jul 3, 2026
  • CVE-2024-14037CVSS 9.8
    Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution...
    Admin intel📅 Updated: Jul 3, 2026
  • CVE-2026-8451CVSS 8.8
    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured...
    Admin intel📅 Updated: Jul 2, 2026
  • CVE-2026-8037CVSS 9.6
    OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to...
    Admin intel📅 Updated: Jul 1, 2026
  • CVE-2026-45659CVSS 8.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
    CISA KEV📅 Added to KEV: Jul 1, 2026
  • CVE-2026-48558CVSS 10.0
    SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the OIDC authentication...
    Admin intelCISA KEV📅 Added to KEV: Jun 29, 2026📅 Updated: Jun 29, 2026
  • CVE-2026-46817CVSS 9.8
    Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected...
    Admin intel📅 Updated: Jun 29, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-49445CVSS 9.2
    ### Impact When Cilium L7 functionality is enabled on a cluster, the...
  • CVE-2026-52889CVSS 9.8
    ## Summary Formie Hidden fields could evaluate request-derived values as Twig during...
  • CVE-2025-53830CVSS 9.1
    Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and...
  • CVE-2025-53827CVSS 9.1
    ownCloud Core is the server-side component of the file storage, synchronization, and...
  • CVE-2026-48316CVSS 10.0
    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input...
  • CVE-2026-6382CVSS 9.1
    The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before...
  • CVE-2026-14808CVSS 9.8
    Prog Management System developed by PROG MIS has a Exposure of Sensitive...
  • CVE-2026-14807CVSS 9.8
    ERP App developed by PROG MIS has a Use of Hard-coded Credentials...
  • CVE-2026-58426CVSS 9.6
    Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read...
  • CVE-2026-58422CVSS 9.8
    Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.