Nocet blackmails with alleged deep fake video

As our cooperation partner Watchlist Internet reports, the criminals “Nocet” send a blackmail message with the subject “Upcoming civil and criminal proceedings”. In it they demand a Bitcoin payment from recipients. Otherwise, they threaten to destroy a person's reputation. Recipients can ignore the letter and are not allowed to make any payment.

Internet users receive a blackmailing email from “Nocet”. The senders state that they “were commissioned by a third party to develop a program to harm you as much as possible. Both financially, physically, and especially emotionally and socially.” Her letter states:

Subject: Pending civil and criminal proceedings – Mr. xxxxxx xxxxxxxxx – Company name

Dear Mr. xxxxxx

On August xx, 2018, at 4 p.m., a deadline expires that will decide your future fate, as well as that of your family and your company. We are just contacting you to warn you. If you send the corresponding amount in Bitcoin (BTC) to the address provided by the end of the deadline, you can avert this in time.

If the amount is not received on time or you ignore this message, immediately after the deadline the attached emails will be sent in your name to several hundred recipients: acquaintances/relatives from your contacts, work colleagues, customers, church and social organizations, the judiciary ,…

This will have enormous criminal and civil consequences for you - but you can still avoid them. And this is just the beginning. Much more has already been initiated.

Further information can be found in the attachment.

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Deadline:
xx.08.18 at 4:00 p.m.
Bitcoin address:
1CEf4rXVZ1mfyQEGRGqhLv9ecpwv5XzzeH
Bitcoin amount:
0.18 BTC (corresponds to approximately 986.4 EUR)
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

A file attachment is attached to the blackmail email. In it, the criminals explain that the message recipients must pay the required Bitcoin amount, otherwise there will be a house search for commercial trafficking in child pornography, terrorist threats against foreign heads of state, confiscation of bank accounts and an international/EU arrest warrant.

threat of danger

The senders Nocet explain in a file attachment that if Bitcoin payment is not made, they carry out random actions that are intended to harm the recipients:

Stage 1: Creating various eBay auctions (IIN,ASR) in the mid-price segment.
Action: sale, non-payment,
goal: civil, criminal complaint

Stage 2: Contacting various people from the list via email
Action: anti-Semitic, racist, Islamophobic, misogynistic texts
Target: certain groups, church, social dignitaries, groups

Stage 3: Contacting various people from the list via email with an explicit wish to exchange,
providing name, address in email, telephone number.
Action: send images that are embarrassing to own/want to have, e.g.
!
!
hentai/loli_porn
is2.xxxxx.org/b/xxxxxxxxxxxxxx.png
gay gangbang
t.xxxxxxxxxxxtube.com/images/20xx-09/69/xxxxxxxx92cae2/xxxxxxxx2cae2-full-7.jpg
she-male/ man
y2.xxxxxxxxx.com/ 224xxxxxxxx.jpg
pissing
x.imagexxxxxxxxxx.com/u/xxxxxx/3995388/75xxxxxxxxxx.gif

Stage 4: Contacting various people from the list via email
Action: messages announcing physical violence.
Bomb/terror threat, target: specific groups, church, social dignitaries, groups

Level 5: Action: Bomb threats, announcements of a shooting spree via mobile phone (SIM registered to you
Action: Blackmail letters (email, registered to you) to various competitors in your local area.
Action: Contacting various people from the list via email with an explicit desire to exchange,
stating their name , address in email, telephone number
Action: sending images whose possession is highly illegal, e.g

Level 6: Action: Sending child pornography/negrophilia/sex with animals (without a link, as self-explanatory) to certain groups, church, social dignitaries, kindergarten, protection association,
goal: triggering criminal investigations due to the possession, distribution and sale of illegal and child pornographic images and videos. Extensive investigation, complete destruction of the family and social environment, pre-trial detention, legal proceedings.

Purchase/sale offers of illegal substances in dark web forums
Action: Purchase, sale offers in various dark web forums that are known to be monitored by the police and FBI.
Due to poor OpSec, they can quickly see who is “actually” behind these anonymous accounts. Goal: national: criminal prosecution for possession and sale of drugs.
International: Blacklisting by the FBI, possibly an international arrest warrant, at least difficult entry into the USA, other countries.

Level 7: DeepVideoFake videos (for technical background see appendix 1c)
Creation of deep video fakes from existing video/photo material that shows you having sex with minors (age range 3-10). More videos in which “your victims” point to a picture of you and personally describe you as the perpetrator, swearing this under oath. Forwarding these videos to the relevant authorities in the relevant countries (Türkiye, Thailand, Ukraine…)

Target: International arrest warrant. Pretrial detention. criminal proceedings

The senders state that they create fake sound recordings “based on existing audio recordings” and “(with) the help of the original photo (…) create a 3D model, create realistic facial expressions and put this into an existing video Nocet writes in capital letters: “The quality of the DeepVideoFakes is so high that only extensive anthropomorphological reports and technical expert reports allow any doubt as to their authenticity!”

Threats of defamatory messages

In the attached document, the criminals show emails that they send to selected contacts when payment is not made. In a defamatory message, Nocet associates recipients with, among other things, the abuse of children.

Source: Watchlist Internet
Source: Watchlist Internet

What should recipients do?

Recipients who receive a blackmailing letter from Nocet do not have to react and can move the email to their spam folder. A payment may not be made because it is more than questionable whether the senders actually have material from the recipients. Nor can it be ruled out that a transfer of Bitcoins will lead to an end to the blackmail.

The criminals can, for example, make further demands for money or publish the supposedly existing material anyway. It is best if the recipient contacts the police and discusses how to proceed.

Protect private data!

To avoid becoming a victim of blackmail, it makes sense to protect your private data. The privacy guidelines from Saferinternet.at explain how this works on social networks.

You can find them here: https://www.saferinternet.at/privatsphaere-leitfaeden/. It is equally important that you a strong password and, if possible, two-factor authentication.

Last but not least, you must not carelessly disclose personal data, images and information about them over the Internet.


If you enjoyed this post and value the importance of well-founded information, become part of the exclusive Mimikama Club! Support our work and help us promote awareness and combat misinformation. As a club member you receive:

📬 Special Weekly Newsletter: Get exclusive content straight to your inbox.
🎥 Exclusive video* “Fact Checker Basic Course”: Learn from Andre Wolf how to recognize and combat misinformation.
📅 Early access to in-depth articles and fact checks: always be one step ahead.
📄 Bonus articles, just for you: Discover content you won't find anywhere else.
📝 Participation in webinars and workshops : Join us live or watch the recordings.
✔️ Quality exchange: Discuss safely in our comment function without trolls and bots.

Join us and become part of a community that stands for truth and clarity. Together we can make the world a little better!

* In this special course, Andre Wolf will teach you how to recognize and effectively combat misinformation. After completing the video, you have the opportunity to join our research team and actively participate in the education - an opportunity that is exclusively reserved for our club members!


Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )