SPAM: Warning-51291778

Sender: Amadeus Team <Daw*@*rodosghost.com> Sent on: 06/15/2017 10:52 PM Subject: Warning-51291778 Amount: 3

Message (Plain Version)

We are the Collective Amadeus and we have chosen your website/network as target for our next DDoS attack and we will encrypted on computers Crypto-Ransomware.
Unfortunately your data was leaked in the recent hacking of the server and web site and we now have your information.
We have DataBase tax forms,Email clients, DOB, Names, Addresses, Bank Statement, and more sensitive data.
Now, we can publish your details and your clients online who would damage the rating of the company
and would create many problems for you.
Your security system is very bad.
On Friday 06-16 9:00 p.m. GMT !!! We begin to attack your network servers and computers
We will produce a powerful DDoS attack - up to 230 Gbps
All data will be encrypted on computers Crypto-Ransomware
You can stop the attack beginning, if payment 1 bitcoin (3000 $).
Do you have time to pay. If you do not pay before the attack 1 bitcoin the price will increase to 5 bitcoins
After payment we will advice how to fix bugs in your system
Please send the bitcoin to the following Bitcoin address:
1PgjhU1Z1NzLUWyLxvZYpTWPaVKWWqT9eb
Once you have paid we will automatically get informed that it was your payment.
What if I don’t pay?
If you decide not to pay, we will start the attack at the indicated date and uphold it until you do, there’s no counter measure to this, you will only end up wasting more money trying to find a solution. We will completely destroy your reputation amongst google and your customers and make sure your website will remain offline until you pay.
This is not a hoax, do not reply to this email, don’t try to reason or negotiate, we will not read any replies. Once you have paid we won’t start the attack and you will never hear from us again!
Please note that Bitcoin is anonymous and no one will find out that you have complied.

Header

Return-Path: daw*@*rodosghost.com
X-Original-To: willisast***@*ulapla.de
Received: from newsmtpdb.kaist.ac.kr (smtp1.kaist.ac.kr [143.248.5.xxx])
by mx.discard.email (Go MTA) with ESMTP
for willisast***@*ulapla.de; Thu, 15 Jun 2017 22:52:03 +0200 (CEST)
Received: from unknown (HELO mail1.kaist.ac.kr) (143.248.5.xxx)
by 143.248.5.xxx with ESMTP; 16 Jun 2017 04:05:16 +0900
X-Original-SENDERIP: 143.248.5.xxx
X-Original-MAILFROM: daw*@*rodosghost.com
X-Original-RCPTTO: willisast***@*ulapla.de
Received: from frodosghost.com (176.195.211.xxx)
by kaist.ac.kr with ESMTP imoxion SensMail SmtpServer 7.0
id 1ef9e8e96ffe464ba85721414a95cf9b for willisast***@*ulapla.de from daw*@*rodosghost.com;
Fri, 16 Jun 2017 04:05:14 +0900
Message-ID: 2CD68DC5D80C2063BFBAF34C********@*rodosghost.com
From: "Amadeus Team" Daw*@*rodosghost.com
To: willisast***@*ulapla.de
Subject: Warning-51291778
Date: Thu, 15 Jun 2017 12:03:23 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="d41b0c64e3397403220410c4603c"
X-Priority: 1