SAN FRANCISCO–At least two credit unions were forced to close facilities as the result of nationwide series of bomb threats that included not just financial institutions, but libraries, schools and other businesses.
San Francisco Fire Credit Union’s office at Presidio and California Streets were evacuated and employees at other branches received an email about a bomb treat, according to the credit union.
In Anniston, Ala., Fort McClellan Credit Union closed a branch after receiving an email threat.
The credit unions and other businesses received emails saying someone had planted bombs within the recipient’s building that it will be detonated unless a hefty bitcoin ransom is paid by the end of the business day.
The emails included the subject line, “I advise you not to call the police.”
According to KrebsOnSecurity, at least one email read, “My man carried a bomb (Hexogen) into the building where your company is located. It is constructed under my direction. It can be hidden anywhere because of its small size, it is not able to damage the supporting building structure, but in the case of its detonation you will get many victims.
“My mercenary keeps the building under the control. If he notices any unusual behavior or emergency he will blow up the bomb.
“I can withdraw my mercenary if you pay. You pay me 20.000 $ in Bitcoin and the bomb will not explode, but don’t try to cheat -I warrant you that I will withdraw my mercenary only after 3 confirmations in blockchain network…”
Krebs noted the Bitcoin address included in the email was different in each message forwarded to KrebsOnSecurity.
“In that respect, this scam is reminiscent of the various email sextortion campaignsthat went viral earlier this year, which led with a password the recipient used at some point in the past and threatened to release embarrassing videos of the recipient unless a bitcoin ransom was paid,” Krebs stated.