Sextortion Email Variant: With QR Code - SANS Internet Storm Center

Participate: Learn more about our honeypot network
https://isc.sans.edu/tools/honeypot/

Handler on Duty: Johannes Ullrich

Threat Level: green

Sextortion Email Variant: With QR Code
Reader Robert submitted a sextortion email with a twist: it contains a QR code: In case you're wondering: I covered the QR code with a cross. I don't want you to pay ransom by accident. All the text in this email is a picture, except for the Bitcoin address. Hence this SPAM variant might be harder to detect by anti-SPAM engines. The QR code decodes to: bitcoin:1F3PqNUSQtv3znDduVgmk4Vq6pf8BFKo62?amount=0.16012 Didier Stevens Senior handler Microsoft MVP blog.DidierStevens.com DidierStevensLabs.com	DidierStevens 678 Posts ISC Handler Feb 25th 2019
Thread locked Subscribe	Feb 25th 2019 3 years ago
Hi I am writing a blog item for a blog at work, I'm going to be adding images of example phishing attacks can I use this one in this blog? thanks	Anonymous
Quote	Feb 26th 2019 3 years ago