You May Not Know Me Email Scam

Also Known As: possible malware infections
Distribution: Moderate
Damage level: Severe

"You may not know me" removal guide

What is "You may not know me"?

The "You may not know me" scam is proliferated using the 'spoofing' method: scammers falsify email addresses to make it seem as if recipients of emails are also senders. Cyber criminals send this email to many people hoping that some will fall for the scam and pay a ransom to prevent distribution of a compromising video. In fact, the video does not exist. This is a common scam used to extort money from users. These emails should not be trusted and the best option is simply to ignore them.

You may not know me spam campaign

Scammers behind the "You may not know me" email state that they have 'cracked' the recipient's device (supposedly a computer) and hacked the email account. They also claim that they infected the computer with malware when the user was visiting an adult website. They go on to state that this malicious program is capable of working as a remote access tool, which allows "hackers" to access the user's webcam and monitor all computing activities. Furthermore, these cyber criminals also claim that they have stolen passwords, logins, contacts, and files. The main goal of this email is to make recipients believe that an embarrassing video was recorded while they were visiting an adult website and watching a video containing adult content. Scammers make threats to proliferate the recorded video (send it to all of the recipient's contacts) unless their ransom demands are met (money is paid). The cost for them to take no action (and not distribute the video) is $695, which must be paid in Bitcoins using a provided Bitcoin wallet address. The deadline is 48 hours. If they are not paid within this time, they state that they will distribute the recorded video. They promise to delete the video as soon as payment is received, and also warn users not to try to contact any authorities. As mentioned in our introduction, this is simply a scam and emails of this type should never be trusted or taken seriously.

Threat Summary:
Name You May Not Know Me Email Scam
Threat Type Phishing, Scam, Social Engineering, Fraud
Symptoms Unauthorized online purchases, changed online account passwords, identity theft, illegal access of one's computer.
Distribution methods Deceptive emails, rogue online pop-up ads, search engine poisoning techniques, misspelled domains.
Damage Loss of sensitive private information, monetary loss, identity theft.
Removal

To eliminate possible malware infections our malware researchers recommend scanning your computer with Spyhunter.
▼ Download Spyhunter
Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Spyhunter.

"You may not know me" is just one of many scams and very similar to We Are Not Going To Steal A Lot Of Time, I Am A Spyware Software Developer, and So I'm The Hacker Who Broke Your Email. Most are used to extort money from people by making threats, however, scammers also use email campaigns to infect computers with viruses - they send emails that contain malicious attachments. In these cases, they often trick email recipients into opening the included attachment, which is usually a Microsoft Office document or PDF document, archive file, executable (.exe), or other file. By opening the malicious attachment, users trigger download and installation of a computer infection (such as LokiBot, TrickBot, Emotet, AZORult, Adwind, and so on). Cyber criminals use these email campaigns to infect computers with viruses designed to steal personal details such as logins and passwords, banking details, or to spread other infections such as ransomware. In this way, they attempt to proliferate malicious programs that record information, which is used to generate revenue. Users with computers infected with viruses of this type often experience problems relating to financial losses, privacy, browsing safety, and so on.

We receive a great deal of feedback from concerned users about this scam email. Here is the most popular question we receive:

Q: Hi pcrisk.com team, I received an email stating that my computer was hacked and they have a video of me. Now they are asking for a ransom in Bitcoins. I think this must be true because they listed my real name and password in the email. What should I do?

A: Do not worry about this email. Neither hackers nor cyber criminals have infiltrated/hacked your computer and there is no video of you watching pornography. Simply ignore the message and do not send any Bitcoins. Your email, name, and password was probably stolen from a compromised website such as  Yahoo (these website breaches are common). If you are concerned, you can check if your accounts have been compromised by visiting the haveibeenpwned website.

How do spam campaigns infect computers?

To proliferate or install computer infections, malicious attachments must first be opened. Archive file (such as ZIP, RAR, etc.) must be extracted and the included file executed (opened), whilst executable files must be executed, and so on. If the attachment is a Microsoft Office document, once opened, it asks for permission to enable macro commands. If these commands are enabled, the malicious document downloads and installs a computer infection. Generally, computers cannot be harmed without opening attachments presented in emails sent cyber criminals via spam email campaigns.

How to avoid installation of malware?

If you receive an email from an unknown/suspicious sender containing an irrelevant attachment, do not open it without first carefully studying the message. Download software using official and trustworthy sources only. Avoid using third party software downloaders and installers, since these are often monetized by promoting rogue applications. Install software with care and check "Custom", "Advanced", and other similar settings. In some cases, software developers use the "bundling" method, and thus potentially unwanted applications are hidden within download/installation settings. Update software using tools or implemented functions provided by official developers. Fake software updaters should not be used, since they proliferate potentially unwanted, rogue applications. You are advised to use Microsoft Office 2010 or later, since older versions do not include "Protected View" mode, which prevents downloaded documents (malicious email attachments) from downloading and installing malware. If you have already opened malicious attachments, we recommend running a scan with Spyhunter for Windows to automatically eliminate infiltrated malware.

Text presented in the "You may not know me" email message:

Subject: Everton prepared to let trio leave the club in January with James... tepyim

 

Dear alt.karl@gmx.de

 

You may not know me and you are probably wondering why you are getting this e mail, right?
I'm a hacker who cracked your devices a few months ago.
I sent you an email from YOUR hacked account.
I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean).
While you were watching videos, your internet browser started out functioning as a RDP (Remote Control) having a keylogger which gave me accessibility to your screen and web cam.
after that, my software program obtained all of your contacts and files.

You entered a passwords on the websites you visited, and I intercepted it.

Of course you can will change it, or already changed it.
But it doesn't matter, my malware updated it every time.

What did I do?

I created a double-screen video. 1st part shows the video you were watching (you've got a good taste haha . . .), and 2nd part shows the recording of your web cam.

Do not try to find and destroy my virus! (All your data is already uploaded to a remote server)
– Do not try to contact with me
– Various security services will not help you; formatting a disk or destroying a device will not help either, since your data is already on a remote server.

I guarantee you that I will not disturb you again after payment, as you are not my single victim. This is a hacker code of honor.

Don’t be mad at me, everyone has their own work.
exactly what should you do?

Well, in my opinion, $695 (USD) is a fair price for our little secret. You'll make the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in Google).

My Bitcoin wallet Address:
1KpioVDQJ47uQ8vepwwtaKDwUpyWLXV8cJ, 1AgexGi34oNAHXS9vs8ZrtKw5ULkV1LoWg, 1s21MkGGWRP1eeGj5UQZVM97yRdEHojgd, 1AzVpAbxm9ASVKnXyJ8PwccmK9KYo1x6fA, 19utGeSLKhvj9zVrRjy2axBqZ222eg3Hni, 1K4JEY74c5puP86EPKo6HmNrB571kT8kG2, 1Hi47wpCrN2joKSoEcRXBhvtpe9Vu8X1cJ, 16ohM4oFgd4iy3SQWTptMrF6RvryYXAX9F, 12wmxvfVgcG8hwZjLqaBohxP8AWk6bodgH, 19Eqn33cA15qg9niSxBonDHQSu4bLfqAtS, 1HoajV32DBeSe98QYCMMX5oEqU9iy8c7Wa, 1Ep8dntVe4D63YuHnGcq52gVA4rCj1jaTP, 1Hp1rDtB6cZ5xWtMhbx58p7MDvRSkXRjfS, 18xueRUcw7WiHcfcr4Lt4P8Eee3DrnxX3c, 16NSUU3NXh9GtGGVnjvavSk1aUB6Fz7pSF, 13ohHyBiBgsinkNkhyqDHZDTvdALzHqV2V, 1HmWB1LMugSxyffThnxzqiq6q3gknChiMq


(It is cAsE sensitive, so copy and paste it)

Important:
You have 48 hour in order to make the payment. (I've a facebook pixel in this mail, and at this moment I know that you have read through this email message).
To track the reading of a message and the actions in it, I use the facebook pixel.
Thanks to them. (Everything that is used for the authorities can help us.)
If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on. Having said that, if I receive the payment, I'll destroy the video immidiately.
If you need evidence, reply with "Yes!" and I will certainly send out your video recording to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by responding to this message.

Another variant of "You May Not Know Me" email:

You May Not Know Me email spam campaign (sample 2)

Text presented within this message:

Subject: This account has been hacked! Change your password right now!

 

You may not know me and you are probably wondering why you are getting this e mail, right?
I’m a hacker who cracked your email and devices a few months ago.

Do not try to contact me or find me, it is impossible, since I sent you an email from YOUR hacked account.
I setup a malware on the adult vids (porno) web-site and guess what, you visited this site to have fun (you know what I mean).
While you were watching videos, your internet browser started out functioning as a RDP (Remote Control) having a keylogger which gave me accessibility to your screen and web cam.
After that, my software program obtained all information.

You entered a passwords on the websites you visited, and I intercepted it.
Of course you can will change it, or already changed it.
But it doesn’t matter, my malware updated it every time.
What did I do?

I backuped device. All files and contacts.
I created a double-screen video. 1st part shows the video you were watching (you’ve got a good taste haha . . .), and 2nd part shows the recording of your web cam.
exactly what should you do?
Well, in my opinion, $1000 (USD) is a fair price for our little secret. You’ll make the payment by Bitcoin (if you do not know this, search “how to buy bitcoin” in Google).
My Bitcoin wallet Address:
1Mbwc2qwfrKjWS2N83wmohbHUtr35HKgNe, 19vBDAb9FtqDsCoTK3WUgmo2XhujJWVMsU, 1FeTKB65csAWpzzE1MMBAkeiGeXt1ri3wx, 1PySaTv351ess2WFYRqVynNTmopzWcTzMY, 1HVssPWk1x258c3KYKpKMpvqCsSiUjfxwc, 1L7AuiXQGCqokVWy8icWCAoQwuKzTiLwyi, 1JEzeyg5wNBAS8y6c3LWh1ARU9JWZibWLS, 196FGBPW7JzPNCNjRZLtvpn3s6Ugppgdt1, 1LW3mco8pzBhJMpZJDeFeqx1oEpQcsF3r5, 15tGCMyPbDq4sJMV1Dhh5h5Mv9gYub7p7U, 1CVWM8m5ZMnVWc2SWYQ11hErrLSeHm1GsD, 14ReGPgZkGbhD43vAySr5GfkGWLUGuNBUZ, 1PAtx9bqa398TnSoXd2f1P8CKev71XbtCv, 1QHvYpm82AE4zE4FCHAhRwcV4WkR6qsG4
(It is cAsE sensitive, so copy and paste it)

Important:
You have 48 hour in order to make the payment. (I’ve a unique pixel in this e mail, and at this moment I know that you have read through this email message).
To track the reading of a message and the actions in it, I use the facebook pixel.
Thanks to them. (Everything that is used for the authorities can help us.) If I do not get the BitCoins, I will certainly send out your video recording to all of your contacts including relatives, coworkers, and so on.

Another variant of "You May Not Know Me" spam email:

You May Not Know Me email spam (sample 3)

Text presented within this email:

Hi, this account was infected! Modify the password immediately!
You may not know me me and you obviously are most likely surprised why you're receiving this particular email, proper?
I'mhacker who exploitedyour emailand OStwo months ago.
Do not waste your time and make an attempt to get in touch with me or try to find me, in fact it's impossible, since I sent you this message using YOUR hacked account.
I've build in spyware on the adult vids (porno) site and guess that you have watched this website to enjoy it (think you understand what I mean).
Whilst you were keeping an eye on films, your internet browser started out functioning like a RDP (Remote Control) with a keylogger that granted me access to your display and web camera.
Next step, my programgatheredall info.
You have put passcodes on the online resources you visited, and I caught all of them.
Without a doubt, you'll be able to modify them, or perhaps already changed them.
However it doesn't matter, my app renews it regularly.
And what did I do?
I generated a reserve copy of your device. Of each file and contacts.
I created a dual-screen record. The 1 part reveals the clip that you were watching (you have a good preferences, haha...), and the 2nd screen shows the movie from your own web camera.
What must you do?
Clearly, in my opinion, 500 USD is a inexpensive price for our little secret. You'll do the deposit by bitcoins (if you don't know this, go searching “how to buy bitcoin” in Google).
My bitcoin wallet address:
1ECEpaRhUMf5RG9TDxT2Hrg8dyQ41qxTc6, 1KP8QyvSwqWhndEnjaPHxjvQugkQ79q91P, 1FsDGqSSYcW9RwaAoZWE9Gg5V5EYYuVWKy, 1C2QQxwBqSc6rJvdeTTw9AmdJWud9y3Lwk, 12q4HmZZg13BpPEnMYmHUjXxevG3FbULFL, 186TdQEpbuACMNEHwAiYGk6uu2D8CkNqEF, 12HzaNqdS7388WCwoiAASPeuar1yotv9Ex, 18CfWDPYMEvpCPwctsqH1zhiK3FxwozSBv, 14AgiVgfNwgY8ZbvxvRRrc1vz2FhjAbhhJ, 1Npfaku5BghWwWqRBrxKQC2w2naM1cbdnB, 1CpJ3iCbe77tzg7q2JwJfgH72BeouZ38aA, 1xikfj4pTXsJvinHcaPvGgi2w7e5KrB2d, 193qGHXBucC4pVyYZKsGEBVjBFWfktRBbF, 1PUvTwDNJDfPPFJsT1eDScL1HMtW1RCjb9
(It is cAsE sensitive, so copy and paste it).
Attention:
You will have 48 hours in order to make the payment. (I have an exclusive pixel to this e-mail, and right now I know that you've read through this email).
To trackthe reading of a letterand the actionswithin it, I utilizea Facebook pixel. Thanks to them. (The stuff thatcan be usedfor the authorities may helpus.)

If I do not get bitcoins, I shall immediately direct your videofile to each of your contacts, including relatives, co-workers, etcetera.

Updated variants of these scam emails are using an image instead of text, bitcoin address has a QR code next to it:

you might not know me scam email (no text just image variant)

Bitcoin addresses used in this spam campaign: 1BHKshzCyC13XsbwmaT1apubiUuWvBxPsu, 1KkbnKU17jevepbTUh2eNsLZu4s3qDDc7R, 1C1Zx9VgKECALuK4pfcH8qMkjxRFx4bdyH, 1KJmbnch5pcKqWJY3j2B6k4ySUVAY9L4A6, 1HdoWSBZmcqB2tt8t7Rnz2ENHnt6sZq64w, 1CXg6o3seAqWUCuXb6WYCQhcFhug8Q9EUe, 17c1VuW1mP7czvJwHQuUbWTFV8D9iiMp8Z, 12u3v7rcDpHwTNeQ2HEmEfh2kPYP3sNy4n, 1DWiCneJrkoJ3P8JG7jWyhqPhH1DkDS5Xw, 128ue8W9eTH3p9CAE7R3DgPUTJZvc1AiRq, 1FTGAPnfQG8MY744mgGPDPWTRcXtm9dqsM, 1HPPRMMBe89D91PEKKDKGy5xu74EHTawTJ, 164hA3Gpa9SwCnKjW2mskQxtsQ8F18iE8c, 164qrVEm4Q2EExX8FL9sxqZan1ZAd7R6zk, 1C3tfuSXcm49cCRxVKqLzGS5KaFgvvRQmH, 1G2E4fDtrMF4S8XwUnsbKDvKyct3YMReH6, 1H1tXqjXW7NXQA6VEfUEWPpsHN6Sw7gQmT

Instant automatic removal of possible malware infections: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Spyhunter is a professional automatic malware removal tool that is recommended to get rid of possible malware infections. Download it by clicking the button below:
▼ DOWNLOAD Spyhunter By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Spyhunter.

Quick menu:

How to remove malware manually?

Manual malware removal is a complicated task - usually it is best to allow antivirus or anti-malware programs to do this automatically. To remove this malware we recommend using Spyhunter for Windows. If you wish to remove malware manually, the first step is to identify the name of the malware that you are trying to remove. Here is an example of a suspicious program running on a user's computer:

malicious process running on user's computer sample

If you checked the list of programs running on your computer, for example, using task manager, and identified a program that looks suspicious, you should continue with these steps:

manual malware removal step 1 Download a program called Autoruns. This program shows auto-start applications, Registry, and file system locations:

screenshot of autoruns application

manual malware removal step 2Restart your computer into Safe Mode:

Windows XP and Windows 7 users: Start your computer in Safe Mode. Click Start, click Shut Down, click Restart, click OK. During your computer start process, press the F8 key on your keyboard multiple times until you see the Windows Advanced Option menu, and then select Safe Mode with Networking from the list.

Safe Mode with Networking

Video showing how to start Windows 7 in "Safe Mode with Networking":

Windows 8 users: Start Windows 8 is Safe Mode with Networking - Go to Windows 8 Start Screen, type Advanced, in the search results select Settings. Click Advanced startup options, in the opened "General PC Settings" window, select Advanced startup. Click the "Restart now" button. Your computer will now restart into the "Advanced Startup options menu". Click the "Troubleshoot" button, and then click the "Advanced options" button. In the advanced option screen, click "Startup settings". Click the "Restart" button. Your PC will restart into the Startup Settings screen. Press F5 to boot in Safe Mode with Networking.

Windows 8 Safe Mode with networking

Video showing how to start Windows 8 in "Safe Mode with Networking":

Windows 10 users: Click the Windows logo and select the Power icon. In the opened menu click "Restart" while holding "Shift" button on your keyboard. In the "choose an option" window click on the "Troubleshoot", next select "Advanced options". In the advanced options menu select "Startup Settings" and click on the "Restart" button. In the following window you should click the "F5" button on your keyboard. This will restart your operating system in safe mode with networking.

windows 10 safe mode with networking

Video showing how to start Windows 10 in "Safe Mode with Networking":

 

manual malware removal step 3Extract the downloaded archive and run the Autoruns.exe file.

extract autoruns.zip and run autoruns.exe

manual malware removal step 4In the Autoruns application, click "Options" at the top and uncheck the "Hide Empty Locations" and "Hide Windows Entries" options. After this procedure, click the "Refresh" icon.

Click 'Options' at the top and uncheck 'Hide Empty Locations' and 'Hide Windows Entries' options

manual malware removal step 5Check the list provided by the Autoruns application and locate the malware file that you want to eliminate.

You should write down its full path and name. Note that some malware hides process names under legitimate Windows process names. At this stage, it is very important to avoid removing system files. After you locate the suspicious program you wish to remove, right click your mouse over its name and choose "Delete".

locate the malware file you want to remove

After removing the malware through the Autoruns application (this ensures that the malware will not run automatically on the next system startup), you should search for the malware name on your computer. Be sure to enable hidden files and folders before proceeding. If you find the filename of the malware, be sure to remove it.

searching for malware file on your computer

Reboot your computer in normal mode. Following these steps should remove any malware from your computer. Note that manual threat removal requires advanced computer skills. If you do not have these skills, leave malware removal to antivirus and anti-malware programs. These steps might not work with advanced malware infections. As always it is best to prevent infection than try to remove malware later. To keep your computer safe, install the latest operating system updates and use antivirus software.

To be sure your computer is free of malware infections, we recommend scanning it with Spyhunter for Windows.