Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From info@ift-informatik.de  Tue Oct 16 00:18:03 2018
Return-Path: <info@ift-informatik.de>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id D28EB3D20001A; Tue, 16 Oct 2018 00:18:03 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Tue, 16 Oct 2018 00:18:03 +0200
From: <info@ift-informatik.de>
To: <info@ift-informatik.de>
Subject: *****SPAM***** info@ift-informatik.de is hacked
Date: 15 Oct 2018 12:55:01 -0500
Message-Id: <EA89CD1F38AE5BEA89CD1F38AE5BEA89@U0X143YU0X1>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.6 required=5.0 tests=BAYES_00,CK_HELO_GENERIC,
	DATE_IN_PAST_03_06,DOS_OE_TO_MX,FROM_IN_TO_AND_SUBJ,HELO_DYNAMIC_SPLIT_IP,
	RDNS_NONE,TO_IN_SUBJ,TVD_RCVD_IP,URIBL_BLOCKED autolearn=no
	autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5BC5121B.414DAE23"

This is a multi-part message in MIME format.

------------=_5BC5121B.414DAE23
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Hello! My nickname in darknet is boycie16. I hacked this mailbox
   more than six months ago, through it I infected your operating system with
   a virus (trojan) created by me and have been monitoring you for a long time.
   [...] 

Content analysis details:   (10.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 3.5 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
                            IP)
 0.0 TVD_RCVD_IP            No description available.
 0.2 CK_HELO_GENERIC        Relay used name indicative of a Dynamic Pool or
                            Generic rPTR
 1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0007]
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: ift-informatik.de]
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 1.0 FROM_IN_TO_AND_SUBJ    From address is in To and Subject
 2.9 TO_IN_SUBJ             To address is in Subject
 2.5 DOS_OE_TO_MX           Delivered direct to MX with OE headers



------------=_5BC5121B.414DAE23
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from 246.249.0.152.l.static.claro.net.do (unknown [152.0.249.246])
	by ift-informatik.de (Postfix) with ESMTP id C677F3D20001A
	for <info@ift-informatik.de>; Tue, 16 Oct 2018 00:18:01 +0200 (CEST)
Message-ID: <EA89CD1F38AE5BEA89CD1F38AE5BEA89@U0X143YU0X1>
From: <info@ift-informatik.de>
To: <info@ift-informatik.de>
Subject: info@ift-informatik.de is hacked
Date: 15 Oct 2018 12:55:01 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="windows-1252"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931

Hello!

My nickname in darknet is boycie16.
I hacked this mailbox more than six months ago, 
through it I infected your operating system with a virus (trojan) created by me and have been monitoring you for a long time.

If you don't belive me please check 'from address' in your header, you will see that I sent you an email from your mailbox.

Even if you changed the password after that - it does not matter, my virus intercepted all the caching data on your computer
and automatically saved access for me.

I have access to all your accounts, social networks, email, browsing history.
Accordingly, I have the data of all your contacts, files from your computer, photos and videos.

I was most struck by the intimate content sites that you occasionally visit.
You have a very wild imagination, I tell you!

During your pastime and entertainment there, I took screenshot through the camera of your device, synchronizing with what you are watching.
Oh my god! You are so funny and excited!

I think that you do not want all your contacts to get these files, right?
If you are of the same opinion, then I think that $546 is quite a fair price to destroy the dirt I created.

Send the above amount on my BTC wallet (bitcoin): 19D67Tgb3neJiTHd8pZDEBYmUn2qSjxEeB
As soon as the above amount is received, I guarantee that the data will be deleted, I do not need it.

Otherwise, these files and history of visiting sites will get all your contacts from your device.
Also, I'll send to everyone your contact access to your email and access logs, I have carefully saved it!

Since reading this letter you have 50 hours!
After your reading this message, I'll receive an automatic notification that you have seen the letter.

I hope I taught you a good lesson.
Do not be so nonchalant, please visit only to proven resources, and don't enter your passwords anywhere!
Good luck!


------------=_5BC5121B.414DAE23--