Reader Robert submitted a sextortion email with a twist: it contains a QR code:

In case you're wondering: I covered the QR code with a cross. I don't want you to pay ransom by accident.

All the text in this email is a picture, except for the Bitcoin address. Hence this SPAM variant might be harder to detect by anti-SPAM engines.

The QR code decodes to:

bitcoin:1F3PqNUSQtv3znDduVgmk4Vq6pf8BFKo62?amount=0.16012

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com