Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: InfoSec Handlers Diary Blog - SANS Internet Storm Center InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
ISC Stormcast For Tuesday, March 8th, 2022 https://isc.sans.edu/podcastdetail.html?id=7910

No Bitcoin - No Problem: Follow Up to Last Weeks Donation Scam

Published: 2022-03-07
Last Updated: 2022-03-07 07:28:17 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)

Friday, I wrote about a scam email I received asking for "donations" to the Red Cross via Bitcoin. The email wasn't hard to spot as a scam, and a victim not realizing this is a scam may not be familiar with Bitcoin either. So I replied to the email asking for alternatives. Interestingly, I did receive a reply:

Hello Johannes

 

We appreciate your worthy kindness on generously willing to donate to a noble cause. 

You are among the few who have chosen to write their name on the sand of time. 
 

We at ICRC love and appreciate you. With your gift of donation, you will be saving many souls in Ukraine. 

 

For Easiest Payment Kindly send your donation to this Paypal account: mrod71@hotmail.com

 

And send a Payment Slip for our documentation purposes.

 

Thank you.


Yours Faithfully,
Peter Maurer
(ICRC President)

The email address was reported to Paypal. Luckily, the Bitcoin part of the scam doesn't appear to work very well, with no additional money being received other than the very first transaction (maybe just a test?)

---
Johannes B. Ullrich, Ph.D. , Dean of Research, SANS.edu
Twitter|

0 comment(s)
ISC Stormcast For Monday, March 7th, 2022 https://isc.sans.edu/podcastdetail.html?id=7908
Diary Archives