Porn users warned over threat that secretly films through webcam before photos used for blackmail

A real online danger has emerged after a new type of malware can now detect when you're watching porn.

Over the years, you might have noticed those scam emails claiming to have explicit videos or photos of you, demanding money to keep them private.

However, these empty threats could now become a reality due to a new type of malware called Stealerium.

Stealerium secretly takes screenshots of your screen and attempts to capture images from your webcam simultaneously, as well as any other sensitive data like banking information, usernames, and passwords.

It is said that this information, including the screenshots of your browsing history, is then sent to cybercriminals, who use it for blackmail and extortion.

Researchers at Proofpoint analysed this malware and warned that it marks a disturbing new stage in so-called 'sextortion' schemes.

Hackers are targeting porn users by secretly recording through webcams and using footage for blackmail (Getty Stock Images)

How does Stealerium hack your computer?

Stealerium spreads primarily through phishing emails that now look pretty convincing.

The attackers will disguise their messages as official notices from well-known organisations such as banks, streaming platforms, or charities. Then the emails often urge you to click a link or open an attachment.

Common subject lines you should look out for are 'Payment Due', 'Court Summons', or 'Invoice Attached'.

Once you click a malicious link or open a file, the malware installs itself on your device.

What happens after Stealerium has been downloaded?

After infection, Stealerium scans your computer for sensitive information like passwords, credit card numbers, chat histories, and cryptocurrency data. It also monitors browser activity and detects keywords like 'porn' or 'sex'.

When such terms appear, the malware immediately takes screenshots and webcam snapshots, which are then sent to attackers via platforms like Discord, Telegram, or email.

Proofpoint found that the malware had a 'sextorion' section (Getty Stock Images)

Who is at risk?

Stealerium’s 'sextortion' tactics tend to target individuals directly, as criminals will rely on shame and fear to silence victims and pressure them into paying.

“When it comes to infostealers, they typically are looking for whatever they can grab,” Selena Larson, one of the Proofpoint researchers who worked on the company's analysis, told Wired.

“This adds another layer of privacy invasion and sensitive information that you definitely wouldn't want in the hands of a particular hacker.”

One of Proofpoint's researchers, Kyle Cucci, said that automated webcam screenshots of victims browsing porn is 'pretty much unheard of'. However, they go on to say that while there haven't been any identifiable 'sextorion' victims from this malware, the function's mere existence suggests it may have been used.

Sextortion is becoming less easy to spot (Getty Stock Images)

Many people never report these incidents because they’re embarrassed, which only encourages more attacks. And because phishing campaigns are easy to automate, anyone can become a victim.

“It's gross,” Larson added. “I hate it. For a hacker, it's not like you're taking down a multimillion-dollar company that is going to make waves and have a lot of follow-on impacts.

“They're trying to monetise people one at a time. And maybe people who might be ashamed about reporting something like this.”

How to protect yourself

Be extremely cautious with emails, and never click links or open attachments unless you’re absolutely certain they’re safe.

Also, type website addresses manually and verify suspicious messages using another contact method.

Additional things you can do are physically covering your webcam when it's not in use, keeping your system and antivirus software up to date, and regularly installing security patches.