News of the Ashley Madison hack may be off the front pages, but enterprising criminals have not forgotten, with cybersecurity researchers saying users of the cheating site are being targeted for blackmail.
The personal information, emails and sexual preferences of more than 37 million Ashley Madison users was exposed last month, when hackers who had broken into the sites servers dumped databases and internal communications online.
According to Toshiro Nishimura of Cloudmark, users whose emails were exposed by the leak are now being contacted with demands for payment in the digital cryptocurrency bitcoin if they don’t want information of their Ashley Madison membership sent to their family and friends.
“Unfortunately your data was leaked in the recent hacking of Ashley Madison and I now have your information,” wrote one blackmailer, calling himself Barton.
“I have also used your user profile to find your Facebook page, using this I now have a direct line to message all your friends and family.”
Barton demanded to be sent 1.05 bitcoins (around US$250 as of September 10) or he would “out” the user.
From an investigation of the bitcoin blockchain, a public record of all transactions in the currency, Nishimura estimated that around US$15,000 had been paid to blackmailers targeting Ashley Madison users.
“For a spammer with pre-existing infrastructure and tools, this extortion campaign could have yielded a worthwhile sum for very little effort,” Nishimura said.
“All the blackmailer had