[DownToBrassTacks]

Hi.

Apart from a potential partrnership, I'd be interested in any kind of advice relevant to the tricky craft of blackmailing. I only plan to target real scumbags who get a kick out of seriously messed up stuff; found lots of those and know how to find moar. But so far my setup is very limited, and the outcome of my attempts has been highly frustrating.

So I expect specific advice on such issues as:

- How to setup anonymous e-mail accounts with good odds of reaching the inbox from regular providers (Gmail, Yahoo, Outlook...). Something both more secure and more convenient than the likes of ProtonMail, Tuta and whatnot. Someone recommended to "buy a cheap domain and use it to host a mailserver", but I have zero experience with that and no idea on how to proceed.

- Which "virtual phone" services are actually working to send / receive SMS to regular phone numbers that won't get blocked or ignored.

- How to access the most prominent social media (Facebook, LinkedIn, Instagram) anonymously without getting accounts instantly banned. I'm not sure if I should purchase already verified accounts, or rent proxies, or both. (And currently I couldn't even afford such services anyway.)
What would be known reliable vendors in each category?

- Methods to get a target's attention, which, as I painfully found out, might be the biggest challenge nowadays in any kind of endeavour that relies on delivering messages, as people in general are flooded with messages competing for their fledgling attention, making it very difficult to both stand out and be taken seriously. I've tried various approaches, goofy or serious, subtle or brutal, sparse or elaborate, what worked best seemed counter-intuitive to me. (But everything seems counter-intuitive to me when it comes to interacting with human beings.)

- Ideas on how to request a payment with utmost safety from someone who has zero experience with cryptocurrencies. (My own experience is still very limited, and the landscape is constantly changing, it's driving me crazy. I really don't know how to condense instructions in 5 bullet points or less for even a dumb old mofo to follow through between two fapping sessions.)

- Opinions regarding the level of risk of such a scheme, and ways to mitigate that risk.

- Anything else you might deem relevant.

Thanks.

[DownToBrassTacks]

Views: 64 Replies: 0

Well, apparently this isn't the right place for this...
Is this because you're all clueless, or because the topic is perceived as inherently wrong?
Is there any other forum where I'd possibly have more luck?

[Croquet]

Keep in mind I do not have much experience with blackmailing but I hope my post will help.

- How to setup anonymous e-mail accounts with good odds of reaching the inbox from regular providers (Gmail, Yahoo, Outlook...). Something both more secure and more convenient than the likes of ProtonMail, Tuta and whatnot. Someone recommended to "buy a cheap domain and use it to host a mailserver", but I have zero experience with that and no idea on how to proceed.

In my experience ProtonMail is the best so far. You can create as many accounts as you want through their hidden service, just use free temporary email service for verification.

- How to access the most prominent social media (Facebook, LinkedIn, Instagram) anonymously without getting accounts instantly banned. I'm not sure if I should purchase already verified accounts, or rent proxies, or both. (And currently I couldn't even afford such services anyway.)
What would be known reliable vendors in each category?

Facebook and Instagram can be accessed through Tor Browser if account was created from clean IP address. For Discord you can use WebCord. Unfortunately I cannot help with LinkedIn or other social media.

- Methods to get a target's attention, which, as I painfully found out, might be the biggest challenge nowadays in any kind of endeavour that relies on delivering messages, as people in general are flooded with messages competing for their fledgling attention, making it very difficult to both stand out and be taken seriously. I've tried various approaches, goofy or serious, subtle or brutal, sparse or elaborate, what worked best seemed counter-intuitive to me. (But everything seems counter-intuitive to me when it comes to interacting with human beings.)

On Instagram, reply to their story or most recent post. Show that you are interested in whatever they do and give them attention they beg for. When you move to DMs, move to blackmail.

- Ideas on how to request a payment with utmost safety from someone who has zero experience with cryptocurrencies. (My own experience is still very limited, and the landscape is constantly changing, it's driving me crazy. I really don't know how to condense instructions in 5 bullet points or less for even a dumb old mofo to follow through between two fapping sessions.)

Not much experience here, but I would say Bitcoin is very easy to get, but you need to find place without KYC that will be easy to use for your victim. When you receive Bitcoin from your victim, just convert it to Monero and then send in multiple transactions into your main wallet.

- Opinions regarding the level of risk of such a scheme, and ways to mitigate that risk.

- Anything else you might deem relevant.

Use Kicksecure+Whonix to mitigate risk from local exploits. Use Mullvad with DAITA to avoid correlation.

Is there any other forum where I'd possibly have more luck?

Dread

[DownToBrassTacks]

Keep in mind I do not have much experience with blackmailing but I hope my post will help.

Thanks for the detailed reply.

In my experience ProtonMail is the best so far. You can create as many accounts as you want through their hidden service, just use free temporary email service for verification.

Indeed, it's about the only e-mail service provider that works on Tor and allows to (sometimes) reach regular mailboxes, but it's still very inconvenient. It seems like the actual delivery of messages is very random, it happened that I sent about a dozen messages in a row, each to a single recipient, each personalized with very specific information (information I got from their documents, that would be very difficult to acquire otherwise), and got at best one reply, or nothing at all. It was like they all ended up in a bottomless pit. I couldn't verify this (I would have had to sent test e-mails to a Gmail account for instance, yet another complication or yet another potential liability), but I've seen comments complaining about that same issue, saying that message delivery from ProtonMail to the most prominent webmail providers was pretty much a crapshoot.

As for the verification, it's another complication. Very few temporary e-mail services are allowed; I've found one which works (for now), I don't even want to share it publicly for it could get banned as a result.

Also there are many security concerns regarding ProtonMail, which is known to collaborate with LEA with little pressure. It should be reasonably safe if always accessed from Tor, and if never accessing any personal account on the same system, but it's certainly not a bullet-proof solution.

Besides, it's very inconvenient to manage several accounts that way. Initially I wanted to use a new account for each case, to avoid linking them together as much as possible, but it proved to be unmanageable (especially since it's so difficult to get a first reply). Being able to manage many accounts with a single e-mail client like Thunderbird would be much more efficient, but again I wouldn't know how to proceed.

Someone also commented: "no one nowadays, not even me, check e-mails". Which could be another explanation.

Facebook and Instagram can be accessed through Tor Browser if account was created from clean IP address. For Discord you can use WebCord. Unfortunately I cannot help with LinkedIn or other social media.

That's the problem, if I create an account from a "clean IP address", that account certainly won't be anonymous, everything I do on it, even if it's simple research and data gathering, could be tied back to my beautiful ass. Unless I use proxies, but I have no experience with that, and I currently have 0 XMR to purchase such services (as that too should be anonymous or else it defeats the purpose).

On Instagram, reply to their story or most recent post. Show that you are interested in whatever they do and give them attention they beg for. When you move to DMs, move to blackmail.

I have little experience with social media, nearly none with Instagram, don't know much about the "etiquette" on those places, and wouldn't be comfortable trying to get "friendly" with such people on such platforms. That's among the reasons why I've been looking for a partner, to handle communication methods I'm not comfortable with.

Not much experience here, but I would say Bitcoin is very easy to get, but you need to find place without KYC that will be easy to use for your victim. When you receive Bitcoin from your victim, just convert it to Monero and then send in multiple transactions into your main wallet.

Why without KYC? It's nearly impossible in most countries as far as I know, and I don't care much if the """victim""" (I don't like that term in that context -- those people certainly are no victims, they did what they did in full conscience and have it coming) have to go through KYC (hell, for some of them I may have gathered enough documents to do their KYC myself!).

From what I could gather it's both easier and more reliable to instruct a crypto-illiterate "client" to use a well established KYC exchange (rather than an obscure non-KYC exchange which could either be a scam, or vanish any day without notice). Someone recommended Binance over Kraken because the latter's KYC protocol is reportedly way more involved (I read a comment joking that they would typically request "a naked selfie with your ID in your left hand, tax returns in your mouth, and a number they give you in your buttcheeks").

Then is it safe enough to receive such payments on an Electrum-LTC wallet on Tails (a new wallet for each "client"), then use a non-KYC swapping service to swap them to Monero (in smaller amounts), then receive Monero on a Feather wallet on Tails, then proceed the other way around (using different wallets, perhaps on a different system) to cash out? Someone who seemed knowledgeable but borderline paranoid insisted that such payments should be requested in Monero exclusively (which is highly complicated from the perspective of someone with zero prior experience), and that even Monero should be mixed/churned/whatever on the off chance that it could be traced by a sufficiently determined adversary, now or 15 years from now...

Use Kicksecure+Whonix to mitigate risk from local exploits. Use Mullvad with DAITA to avoid correlation.

I've read various recommendations of either Debian + Whonix, or Qubes + Whonix, or Kicksecure + Whonix, what are the key differences between those options? From what I could gather, Qubes requires serious computer resources to work properly (RAM in particular).
Debian is a standard Linux distribution, presumably very reliable (I have little experience with Linux so far, I've used Lubuntu sparringly and Tails for about a year). Also it may be better in terms of plausible deniability, I assume that using Qubes is more suspicious (although I sure hope I'll never be in a situation where plausible deniability comes into play, it still has to be considered).
Kicksecure I don't know much about it.

What is DAITA?
Regarding VPNs, the general consensus among experts in "OpSec" (from what I could gather on other forums) is that they're barely even useful, don't provide any serious protection, rather increase the "attack surface", and should never be relied upon for any kind of illicit activity. Although Mullvad is still held in high regard, which is quite confusing. One thing I've read repeatedly is that it's a bad idea to do "Tor over VPN", i.e. connecting through Tor with a VPN at the entry point; while "VPN over Tor", i.e. using a VPN after the Tor exit node, can be useful in some situations (to access websites which ban Tor IP addresses). One advanced setup which is often recommended is to connect to a distant public WiFi network using a high range Yagi antenna -- but that's another thing I definitely can't afford as of now.

Dread

Been there, done that, didn't have much luck unfortunately... And lately it has become more difficult to even discuss that kind of topic. A few days ago, I made a new account (lucky I did: at least I didn't lose much), made a post to request a partnership to help "process a high value target" for blackmail (I thought that it would be more appealing for an experienced extortionist if I mentioned a single "big fish" rather than dozens of small-to-medium fishes, although I do have a few in the "big fish" category), the account got outright banned; I asked why, got brief replies saying that "services related to harm are a bannable offense", which "can be broad to cover financial harm too", and that "targeting a specific real life individual" would not be allowed. So it's alright to scam thousands of random people through various kinds of indiscriminate schemes that are discussed there all the time (bank fraud, ransomware, "romance scam", crypto-draining, you name it), but targeting specific certified scumbags with no trickery or deception involved is somehow considered unpalatable. (Meanwhile, I've reported posts which propose such things as: "robbery, hired assault", or advocate the following: "all you need is a fake id, a honeypot, an industrial estate and someone threatening physical harm" -- those posts are still there, even after I quoted these bits in a reply to that forum's main admin. I'm really really tired of trying to figure out that kind of "logic", really realy tired of having to put up with that amount of bullshit.)