Security breach

[TimTDP]

My wife has just received the following email:

From: Bunnie Venzo <[email protected]>

Hey there, I actually came to know all of the sneaky secrets of your life. I won't explain you just what exactly I know, I've got every detail along with me. To demonstrate this, just let me say to you that one of your passwords is desrae08. Send me $8000 via BITC01N to the address 1Fxus3t9xejzqzFZY78BSyrc64WnztQL4x in the next 46 hours. I would like to make one important thing really clear, that I will mess up your life fully if I do not get the payment. When I get the payment, I'll remove each and every details I have with me, and I will go away and you will don't ever hear a thing from myself. It is the first and also last e-mail from me as well as the offer can not be negotiated, so do not reply to this e-mail.

The password mentioned is correct

What is the best thing to do?

 

[OCP]

Send me R800 and i will delete the evidence for you.

 

[Tman*]

Step 1, Get a password manager (I can recommend the paid version of Safe in Cloud).
Step 2: Change all your passwords. Dont use duplicate passwords for different sites.
Step 3: Log out of any and all devices / computers, and log back in.
Step 4: If you are using any open or non secure networks (airports / hotels / coffee shops), get a good quality VPN

 

[skimread]

My wife has just received the following email:




The password mentioned is correct

What is the best thing to do?

Password of what? E-Mail, facebook what?

Does she use that same password for different services or only for one?

Is the password compromised used on a service on this list?

 

[supersunbird]

My wife has just received the following email:




The password mentioned is correct

What is the best thing to do?

The password is correct from some other leaked info and it's just a scam, if it is the same as the e-mail address change it immediately and also change the password used on other sites and she must NOT use the same password for all sites.

 

[neoprema]

They are getting it from leaks that have your email and password and "hoping" that you did not change it.

I received the same, but from what was clearly leaked about a year ago as the password was a very old one i'd used.

Just ignore them, any interaction changes you from a potential target to a viable one. As mentioned above, get a password manager and/or change your passwords to something secure.

 

[syntax]

They are getting it from leaks that have your email and password and "hoping" that you did not change it.

I received the same, but from what was clearly leaked about a year ago as the password was a very old one i'd used.

Just ignore them, any interaction changes you from a potential target to a viable one. As mentioned above, get a password manager and/or change your passwords to something secure.

Exactly this, there are so many databases that have been leaked with your email address, it doesnt necessarily mean it is your email password, but your email and password used to login to a specific application.
Change all your passwords that match that, because if they do proper reconnaissance they will start logging into other likely accounts such as social media etc.
Other than that, ignore

 

[backstreetboy]

What is the best thing to do?

Move over to gmail...

 

[irBosOtter]

Ignore the mail, and do what Tman said