They can get your "contacts list" if they have compromised one of your contacts' PCs, phones, etc... that can happen. That's why address books in all forms are a security/privacy risk.
Then they can send scam emails to all or one and then if they get sucked in and respond with more info it can only get worse...
That scam email doesn't expose any of the contacts however, which would further convince the recipient they were in possession of it, so in this case they simply don't have a list - and the name of the recipient and the supposed video is simply generated from the email account the scam is sent to. It's completely generic, bulk spam - sent in the hope that someone will be socially engineered into falling for it...
Last edited by cynwulf; 12-04-2019 at 10:13 AM.
|