From: [email protected]
Subject: PPL leak warning
"Dear Previously Used Receiver Name!
We are the private investigators working as appointment by Drug Enforcement Administration. Recently we have seized PurplePandaLabs databases with all sensitive information.
As I can see you have bought here some controlled substances, which was delivered to your address Previously Used Receiver Address.
In fact, I have to send all found information for our employers, but since we are private investigators and not the direct staff of DEA, I can erase some information before sending.
But since it carries risks for me and my job anyway, I will not do it for free. In order for me to do this, you must transfer $950 (USD) worth of bitcoins to the address: 1FBGLMZNzd9TqQQX3j7SbZ3Zd41FUX42v8
After you make the transaction, write to me at [email protected] from your email that you used to order. In the letter, write the wallet number or transaction number that you used to transfer.
As soon as I receive the transaction, I will delete all information related to your email and your orders from the database, before it is transferred to DEA.
You can ignore this letter or think for a while, but hurry - on Monday I have to send all the information I received to DEA and then no one will be able to delete records from their databases about your actions.
So, I expect from you to transfer $950 (USD) in BTC to the address 1FBGLMZNzd9TqQQX3j7SbZ3Zd41FUX42v8 and letter with your wallet or transaction number to the email [email protected]"
So it looks like someone’s got some explaining to do. Either the website database was cracked or it’s an inside job, and it’s impossible to tell if it’s a spoofed email or not owing to the wonderful way ALL of Panda’s emails fail domain authentication.
Subject: PPL leak warning
"Dear Previously Used Receiver Name!
We are the private investigators working as appointment by Drug Enforcement Administration. Recently we have seized PurplePandaLabs databases with all sensitive information.
As I can see you have bought here some controlled substances, which was delivered to your address Previously Used Receiver Address.
In fact, I have to send all found information for our employers, but since we are private investigators and not the direct staff of DEA, I can erase some information before sending.
But since it carries risks for me and my job anyway, I will not do it for free. In order for me to do this, you must transfer $950 (USD) worth of bitcoins to the address: 1FBGLMZNzd9TqQQX3j7SbZ3Zd41FUX42v8
After you make the transaction, write to me at [email protected] from your email that you used to order. In the letter, write the wallet number or transaction number that you used to transfer.
As soon as I receive the transaction, I will delete all information related to your email and your orders from the database, before it is transferred to DEA.
You can ignore this letter or think for a while, but hurry - on Monday I have to send all the information I received to DEA and then no one will be able to delete records from their databases about your actions.
So, I expect from you to transfer $950 (USD) in BTC to the address 1FBGLMZNzd9TqQQX3j7SbZ3Zd41FUX42v8 and letter with your wallet or transaction number to the email [email protected]"
So it looks like someone’s got some explaining to do. Either the website database was cracked or it’s an inside job, and it’s impossible to tell if it’s a spoofed email or not owing to the wonderful way ALL of Panda’s emails fail domain authentication.
Last edited: