Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: No Bitcoin - No Problem: Follow Up to Last Weeks Donation Scam - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
No Bitcoin - No Problem: Follow Up to Last Weeks Donation Scam

Friday, I wrote about a scam email I received asking for "donations" to the Red Cross via Bitcoin. The email wasn't hard to spot as a scam, and a victim not realizing this is a scam may not be familiar with Bitcoin either. So I replied to the email asking for alternatives. Interestingly, I did receive a reply:

Hello Johannes


We appreciate your worthy kindness on generously willing to donate to a noble cause. 

You are among the few who have chosen to write their name on the sand of time. 

We at ICRC love and appreciate you. With your gift of donation, you will be saving many souls in Ukraine. 


For Easiest Payment Kindly send your donation to this Paypal account:


And send a Payment Slip for our documentation purposes.


Thank you.

Yours Faithfully,
Peter Maurer
(ICRC President)

The email address was reported to Paypal. Luckily, the Bitcoin part of the scam doesn't appear to work very well, with no additional money being received other than the very first transaction (maybe just a test?)

Johannes B. Ullrich, Ph.D. , Dean of Research,

I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANSFIRE 2022


4511 Posts
ISC Handler
Mar 7th 2022

Sign Up for Free or Log In to start participating in the conversation!