Tricky Hacker Email To Us Exposed – Probably By GoMoPa And Fancy Bear

Become a Patron!
True Information is the most valuable resource and we ask you to give back

Russel <>
Thu, Apr 30 at 11:53 AM
Name: Russel


Website: http://geomids

Comment: Hi,

My name is Russel Corbat and I work as an IT Security Manager at Tim Hortons Inc.

Around 7 hours ago, has been involved to DDoS attack one of our private servers. As a result, we have been experiencing major disruptions in our network.

I had to take a close look at your web-site and I am almost sure that you have rather become a victim as well, instead of being a part of the attackers team.

So, before taking this matter to court and filing a police report, I am offering you a chance to fix this problem by yourself.

Moreover, I strongly suggest you to take this chance, as our attorneys were previously able to seize the defendant more than $417,000 by court action in similar case, just so you know.

However, the good news is the problem can be solved quite easily and you can even do it by yourself.

Tracking the requests sent by your web-site, our specialists identified the exact names of the malicious files used to DDoS attack our network.

Thus, you just need to delete these files and change the passwords on your web-site and the issue will be automatically resolved.

We would not like to involve most likely innocent people into any litigations, that�s why I prepared the list of files to be deleted, even though that doesn�t come within my duties. This will help us solve the problem once and for all.

I have additionally included detailed instructions on how to delete the files in a secure way. Make sure you study them before you start (pay close attention to item 3 of the attached instructions).

Download the report on malicious files and their uninstall instructions here:

Once again, we are in tune for a peaceful solution.

If you are not able to uninstall the malware on your web-site after reviewing the report, just email me and I will try to help you out with that (please do not forget to mention the case number, it can be found in the report).

In case you decide to ignore this message and the DDoS attack from your web-site to our network will be repeated once more, please note that we will contact our attorneys immediately and will have to involve police for further investigation, without giving you a prior notice on it.

Russel Corbat | IT security manager

Tim Hortons Inc.
130 King Street West
Toronto, ON M5X 2A3

Time: April 30, 2020 at 10:53 am
IP Address:
Contact Form URL:
Sent by an unverified visitor to your site.

Become a Patron!
True Information is the most valuable resource and we ask you to give back