Ytdyklly

I have received an email from a hacker saying he got my email account password.
The password showed in the mail is not my account password but is a password I use sometimes.

I checked haveibeenpwned and the password don't report as leaked.

Considering :

• This is a scam to make me pay


• The password is a legit password I use


• The password is not used in sensitive services (banks, socials medias, anything with credit cards information)


• He claims to have installed a malware on my system.

What are the actions I can do? Besides changing this password on any website it is used and never use it again.

This is a known scam. The scammers look up emails and cracked passwords in public leaks of site databases and then send an extortion email to people. The password is already out in the open, sorry. You should change the passwords on all sites using that password. On the up-side, this does mean that the person who is emailing you is not actually a hacker and does not have any malware on your system.

You should use a password manager to prevent this from being an issue in the future.

I will follow the next steps:

1. Don't pay to the guy, and don't respond to his emails


2. Change the password from another different machine, probably yours is infected with something.


3. Format your computer or install an AV to verify the existence of malware or key logger or other malicious activity.

Regards