Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Sextortion Email Variant: With QR Code - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sextortion Email Variant: With QR Code

Reader Robert submitted a sextortion email with a twist: it contains a QR code:

In case you're wondering: I covered the QR code with a cross. I don't want you to pay ransom by accident.

All the text in this email is a picture, except for the Bitcoin address. Hence this SPAM variant might be harder to detect by anti-SPAM engines.

The QR code decodes to:



Didier Stevens
Senior handler
Microsoft MVP


652 Posts
ISC Handler
Feb 25th 2019

I am writing a blog item for a blog at work, I'm going to be adding images of example phishing attacks

can I use this one in this blog?


Sign Up for Free or Log In to start participating in the conversation!