Sextortion Email Variant: With QR Code, (Mon, Feb 25th)

Read Full Article

Reader Robert submitted a sextortion email with a twist: it contains a QR code:

In case you’re wondering: I covered the QR code with a cross. I don’t want you to pay ransom by accident.

All the text in this email is a picture, except for the Bitcoin address. Hence this SPAM variant might be harder to detect by anti-SPAM engines.

The QR code decodes to:

bitcoin:1F3PqNUSQtv3znDduVgmk4Vq6pf8BFKo62?amount=0.16012

 

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com

(c) SANS Internet Storm Center. http://bit.ly/2ruEGKc Creative Commons Attribution-Noncommercial 3.0 United States License.

Read Full Article