logo

Sextortion email scammers increase their “Hello pervert” money demands

ID: d11f511d-460e-5d56-9504-8c899b13667e

STIX ID: report--d11f511d-460e-5d56-9504-8c899b13667e

Feed Name: Malwarebytes Blog

Threat Score
30/100

Date Published: 2025-06-25

Date Updated: 2026-04-28

...
...

This report examines a widespread sextortion email campaign that impersonates victims' email addresses, references Pegasus spyware to threaten victims with leaked footage, and demands payment in Litecoin (current sample asks $1,650). The analysis highlights spoofed sender addresses, quoted-printable/Cyrillic encoding errors suggesting an Eastern European origin, a trend of increasing ransom amounts, empty destination wallets, and practical detection and response guidance (check email authentication headers, do not reply, change exposed passwords, avoid opening attachments, and cover webcams).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.