There's something alarming and shockingly personal when you get an email from a hacker who claims to have compromised your computer and has the password to prove it. But take a deep breath, all is not as bad as it seems: here's exactly what you need to do next.
So, you've got an email from a hacker with your password?
The two most common email pleas for help that land in my inbox are those from people who are convinced their smartphone has been hacked and people, mostly women, who a hacker has emailed with their password. Of the latter, the emails they are talking about seem increasingly to have "Day of Hack" in the subject line, along with a password that has, indeed, been used by the recipient.
Does this hacker really know my password?
The simple answer is yes, patently they do because it's displayed right there in the Day of Hack email subject line. It's a little more convoluted than that, though, and this doesn't mean they also have control of your computer, webcam or email. How so? Well, the first thing to consider is which password do they have? If you only use a small number of passwords repeatedly for different sites and services, the chances are that the password has been found amongst those stolen during a data breach at one of the services involved. If this is the case, the chances are equally high that you'll already have been notified of that breach and advised to change the password anywhere else you use it as well. This is sadly all too common a practice and one that needs to change: now would be a good time, it has to be said. Whatever, if you recognize the password but can't remember where you used it, then check the excellent and free Have I Been Pwned database to see where passwords associated with your email address have been compromised and exposed. Breach databases are traded on the dark web and in cybercrime forums, and the sextortion scammers make use of these. Your panic is a knee-jerk reaction and one that the scammer hopes will convince you they are in control, and while you are not, will pay the money they are asking for. This is why it's always important to take a breath, step back from the screen and think about what is being said with your logical brain engaged.