Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Sextortion Email Variant: With QR Code SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sextortion Email Variant: With QR Code

Reader Robert submitted a sextortion email with a twist: it contains a QR code:

In case you're wondering: I covered the QR code with a cross. I don't want you to pay ransom by accident.

All the text in this email is a picture, except for the Bitcoin address. Hence this SPAM variant might be harder to detect by anti-SPAM engines.

The QR code decodes to:

bitcoin:1F3PqNUSQtv3znDduVgmk4Vq6pf8BFKo62?amount=0.16012

 

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com

 DidierStevens

479 Posts
ISC Handler
Feb 25th 2019
Subscribe Feb 25th 2019
1 year ago
Hi

I am writing a blog item for a blog at work, I'm going to be adding images of example phishing attacks

can I use this one in this blog?

thanks
 Anonymous
Quote Feb 26th 2019
1 year ago

Sign Up for Free or Log In to start participating in the conversation!