Sextortion email scammers increase their “Hello pervert” money demands
ID: d11f511d-460e-5d56-9504-8c899b13667e
STIX ID: report--d11f511d-460e-5d56-9504-8c899b13667e
Feed Name: Malwarebytes Blog
This report examines a widespread sextortion email campaign that impersonates victims' email addresses, references Pegasus spyware to threaten victims with leaked footage, and demands payment in Litecoin (current sample asks $1,650). The analysis highlights spoofed sender addresses, quoted-printable/Cyrillic encoding errors suggesting an Eastern European origin, a trend of increasing ransom amounts, empty destination wallets, and practical detection and response guidance (check email authentication headers, do not reply, change exposed passwords, avoid opening attachments, and cover webcams).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
