Fake CIA Sextortion Scam

My Online Security has identified a sextortion scam that claims to be from the CIA (Central Intelligence Agency). Sent as an email, it claims to be from a member of a special task force assigned to a pedophilia case. Supposedly, the victim’s name is on the list of individuals to be investigated and the task force member is willing to accept a bribe of $10,000 in Bitcoin to remove all of your details from the list.

To add a sense of urgency, the email claims that the victim will be arrested on April 8, 2019 unless the payment is received by March 27th. Each email is slightly different, changing the sender’s email address, Bitcoin wallet, and case number used. The My Online Security article lists contact information to report the email should you receive one.

If you receive this e-mail please delete it and do not respond it is a scam.

Associated Bitcoin Addresses

  • 34TieKvg9Lpf5pSSWGaNvj1FbxY232aFAW
  • 3Hu6RfvmeW1WM4yNisWmJhXzSjAbeaWK7n
  • 33KEtZ8drCJTzh7z5yNLhK9s8bApRvsZS9
  • 3JcBBN2bR9g5uW69ADWsjF8d7dKnZeW55x
  • 3Gpte8gnfZV3qWgQgRWDqZLkUQZa4ToxQS
  • 3JoV6VyMavsYFXkdtUdpmBvaDaEbuCjUH5
  • 3DAEVKMXxAXH5njM2CZoV4U7QdK7Sf6ZZZ
  • 39BXj6HzMfYh3ZtLvYX5igxyjouqW4ApvM
  • 34STNDZPEUhZXcKheLZH9JPxhGZzRcXKvN
  • 35mmTS61KfwobB2zhoZFGFpjJ8BgDRqMui
  • 3AiFhFqKR2J6n3sw6ATcB7FeckiA5852rp
  • 32VsS6uSr8Xx7SPMptDRKUexWpZFmLcDRx
  • 37aet9CFoiZuWce28kVm7YKnwbhcD4qCCD
  • 3KDNxsP5humqMRtEb3RB3tCrZByKbhuF7f
  • 36M16gPhT3keBHUBBuLzDGW6wP5cFZdEg3
  • 33NajP9kGsqQTaR7pvtLnxqxNtjNSVpF1c
  • 383JRiH6fZFBwhafBLgeRJf76iuGUgWehK
  • 36qxWU2hhfGE2fFHd6y8d6UkRMXzZZUNWz
  • 3CTDecaTpZDo72SeAscEsUMUE2r2uPpVWj
  • 35kTRsgvw9VsHzmi1Qr9qWY7kfpupjLMQk
  • 3D9MAGYDZoS82jX8kUnfiR1VW4Ek34ehzQ
  • 33486HJsk4rc6qdzFoF7sGFE68rQwkdUNo
  • 3G5KjxZi9HhutFFFBeb97yasvCDFktvTdn
  • 3DsQPYEFM6ibbCPs1V4m3r7aXCpFw8nS3N
  • 3HNeAn79k7SwxqbRoFV2QM6h9VNfHVZifQ
  • 3LnsCt6nFpf3wVzuiTtbyrTCQSo92GtYvD
  • 3MSsQswLWRkqHshgByGscy3h4adTXZ6bCE
  • 3KA7C3mmbPnSosc7ceGRuHCB2LySn5sLFq
  • 3PUvWaAxz4WkteqrE9bMNPwKt3ZYVqg5Li
  • 3JKmhpRgVB8kmRARUQ2fJ9qyMWur5kkvwh
  • 3E6MXgMNKa39YAvih7fPcCDBdM1G3Bbx7M
  • 3CnyymSUaB3CxPeDSBUK3YsZAC5sidZN83
  • 3GbSfCmG3wvgM9jeTWbk7pUELajuDvQuqB
  • 3QJ4B1e4GVRVoxLrSQC6XSWHAuXDwsx2Da
  • 33TFVDGoWHcnagXoixLStjPBuAABCZZUQL

Domain Names / Email Addresses

The following domain’s and any e-mail addresses on these domains are known to be used for this scam.

gov-cia.gq
gov-cia.ml
gov-cia.tk
gov-cia.cf
gov-cia.ga
gov-cia-it.tk
gov-cia-it.cf
gov-cia-it.ml
gov-cia-it.gq
gov-cia-it.ga
cia-gov-it.cf
cia-gov-it.ml
cia-gov-it.cf
cia-gov-it.gq
cia-gov-int.ga
cia-gov-int.tk
cia-gov-int.gq
cia-gov-int.ml
cia-gov-int.cf
ciagov.cf
ciagov.ml
ciagov.gq
ciagov.tk
ciagov.ga
cia-us-govn.ml
cia-us-govn.cf
cia-us-govn.gq
cia-us-govn.tk
cia-us-govn.ga
cia-int.gq
cia-int.cf
cia-int.ml
cia-int.tk
cia-int.ga
cia-gov.tk
cia-gov.cf
cia-gov.gq
cia-gov.ga
cia-gov.ml

Duncan Newell

Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: