E-Mail Extortion: A Sordid Tale

17.10.2012
I have a paranoid security team. Which is good. I also have paranoid users who don't trust security people. Which is not so good. I discovered this a few years back when a co-worker came into my office, red in the face, eyes puffy and greatly upset. "What on earth is the problem?" I asked in my best official-yet-caring management voice. Between sobs, she explained that, a week earlier, she had gotten an e-mail about the then upcoming Olympics in Greece.

Since her nephew was hoping to be on the US track team, my co-worker was hoping to learn something that might help him. It took a while for a webpage to open up, but when it did, she read all about Greece and the Olympics.

Two days later, she got an e-mail from an unknown address asking for $50 (about Rs 2,750) or they would tell her management that she had been surfing pornography sites. They even said they could prove she had downloaded child pornography!"They even told me which directory it was in on my computer," she cried.

"And sure enough, when I looked there, I found the most disgusting pictures," she added, sobbing.

This was one of the most conservative people I know, and of course she would never do such a thing. She had even asked me once if it was OK to write a personal letter on her desktop and print it off on one of our laser printers.

The Olympic site was immediately suspect to her because it had taken so long to load the pages. "My computer is never that slow," she said.