The contents are bluff 100% and the From field is fake. ( And my camera devices is sealed physically with a masking tapes. lol )

SPAM-EMAIL-SAMPLE-2018-10-02.txt

Delivered-To: usagi@wonderrabbitproject.net
Received: by 2002:a1c:aca:0:0:0:0:0 with SMTP id 193-v6csp4888286wmk;
        Mon, 1 Oct 2018 19:46:04 -0700 (PDT)
X-Google-Smtp-Source: ACcGV61rUxlWnyMQA0u73kIq94CiivooxgugdenyJyELaVrCn6hrYzYL7HmmFpiQV0q1au5Egao+
X-Received: by 2002:a62:1dc2:: with SMTP id d185-v6mr14131761pfd.219.1538448364069;
        Mon, 01 Oct 2018 19:46:04 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1538448364; cv=none;
        d=google.com; s=arc-20160816;
        b=mOyb695skz3+G+5anVqa2BSh0UusAenfi1t1Rq/Ai3E9fqCmbkvY7Zl9oJfjaNEO3P
         NMzeJA562fp+6yrq5Okhm4NxkVLaJOP0DKUSiC3qq23rdjyi17HmzzvMUWFdSujE3FQq
         tzk1lP7Dau9kTl+e308fd5VyvA3YGu1u/PizQ9TSEpCSQAmCXBFywwfp9hQN+qT3VX5N
         ZsnNvj9aeXNfmVmqr0ugmAHYXKYfwiAo3Ts5rJWmLT20S4Ly5UQukCqFxJU4yKoAuFwi
         6Dkln4oEqJWxJ3r5qTylBMPivFuGAYCdjWsUOdZbvCH3LDJBybQHuavKXBjDc/uq5/6W
         ZcgA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=content-language:thread-index:content-transfer-encoding
         :mime-version:message-id:date:subject:to:from;
        bh=sX9zWRua0SFhWY0tqWEZ9AHaLg3SHh+Y5T0ED5OEOIo=;
        b=A1sCs4XTsSnS3ROges5JYWiZ5J6aqpHq0Dwm5DvBU4107pCAHqsjx7GeZQ7Gg3SiZI
         CkYNWMZmTB7AiX24OXVXODr4dUQWarQ0F/fZQhLCu06LqvWYb6pdmki3YM4Kds8SWRD7
         TyRSYsFv9IHoil+hRYnbUv325IGrkh0cQvjmKJY4kI9BW/a/vJCYln3B2tIbZ4wj8OoW
         FmUz76pP9VeF/wL7mI0TcDNbUrd5okCnpIoENlUNj8PmKfKChjXfvxsIOG3ZNgv4pC6E
         GF71EOIABzcN5s/LfZ+JsKn86bTTGmqmKwtjrQXDH1mk9L9leS0acC8YYDnovMTVJw5T
         +n7w==
ARC-Authentication-Results: i=1; mx.google.com;
       spf=neutral (google.com: 201.3.83.236 is neither permitted nor denied by best guess record for domain of usagi@wonderrabbitproject.net) smtp.mailfrom=usagi@wonderrabbitproject.net
Return-Path: <usagi@wonderrabbitproject.net>
Received: from 201.3.83.236.brasiltelecom.net.br ([201.3.83.236])
        by mx.google.com with ESMTP id d31-v6si14979319pla.256.2018.10.01.19.45.58
        for <usagi@wonderrabbitproject.net>;
        Mon, 01 Oct 2018 19:46:03 -0700 (PDT)
Received-SPF: neutral (google.com: 201.3.83.236 is neither permitted nor denied by best guess record for domain of usagi@wonderrabbitproject.net) client-ip=201.3.83.236;
Authentication-Results: mx.google.com;
       spf=neutral (google.com: 201.3.83.236 is neither permitted nor denied by best guess record for domain of usagi@wonderrabbitproject.net) smtp.mailfrom=usagi@wonderrabbitproject.net
From: <usagi@wonderrabbitproject.net>
To: 401894304981675 <usagi@wonderrabbitproject.net>
Subject: Your Account Was Hacked!
Date: 1 Oct 2018 19:16:51 -0400
Message-ID: <001b01d459e0$0168c90e$231db584$@wonderrabbitproject.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="ibm852"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Outlook 15.0
Thread-Index: Acoopvg6g44dsd6xoopvg6g44dsd6x==
Content-Language: en-us

Hi, dear user of wonderrabbitproject.net
We have installed one RAT software into you device.
For this moment your email account is hacked (see on <from address>, I messaged you from your account).
Your password for usagi@wonderrabbitproject.net: 401894304981675

I have downloaded all confidential information from your system and I got some more evidence.
The most interesting moment that I have discovered are videos records where you masturbating.

I posted my virus on porn site, and then you installed it on your operation system.
When you clicked the button Play on porn video, at that moment my trojan was downloaded to your device.
After installation, your front camera shoots video every time you masturbate, in addition, the software is synchronized with the video you choose.

For the moment, the software has collected all your contact information from social networks and email addresses.
If you need to erase all of your collected data, send me $800 in BTC (crypto currency).
This is my Bitcoin wallet: 1PuYAe7BLxNE6F6zE2PeVthfXCeYH88PmQ
You have 48 hours after reading this letter.

After your transaction I will erase all your data.
Otherwise, I will send video with your pranks to all your colleagues and friends!!!

And henceforth be more careful!
Please visit only secure sites!
Bye!