The WannaCry Bitcoin ransom is on the move
You've infected hundreds of thousands of computers across the globe with your ransomware, and victims' cryptocurrency payments are flowing into your Bitcoin wallets.
How long should you wait to try and access that cash?
Well, for the perpetrators behind WannaCry, the answer appears to be about two and a half months. We can say this because the three Bitcoin wallets that held the ransomed loot were all suddenly emptied late Wednesday.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashAnd while we don't know for sure that the same people who unleashed the attack are still in control of the wallets, the profound absence of a statement from law enforcement suggests, at the very least, the accounts haven't been seized.
WannaWhat?
You probably remember WannaCry. It hit on May 12, and was soon described by Europol spokesperson Jan Op Gen Oorth in The Washington Postas "the biggest ransomware attack ever."
The malware locked up victims' computers, and instructed them to make Bitcoin payments to the attackers' wallets in exchange for decryption keys. And the money started pouring in.
Tweet may have been deleted
Sure, the word quickly got out that the attackers weren't decrypting files, so people eventually stopped paying up. Even so, whoever orchestrated the attack found themselves sitting on approximately 52 Bitcoins — worth around $145,000 at the time of writing.
But that didn't mean the attackers were suddenly rolling around in a bed of USD. No, if they were going to spend the money and not be traced in the process, they had to figure out a way to safely move it.
That process began on August 2.
Tweet may have been deleted
The thing about Bitcoin, however, is that it's only pseudonymous. That is to say, while you may not know who owns it, anyone can see where it goes. And you better believe interested parties around the globe are watching this specific cryptocurrency closely.
The Bitcoin from one WannaCry wallet was sent to three wallets. The Bitcoin in those wallets was sent to more wallets, and so on, and so on. All three WannaCry wallets were broken down in a similar way, with at least some of the Bitcoin finding its way to ShapeShift — a cryptocurrency exchange — along the way.
As some forms of digital currency (Monero, for example) are more privacy-focused than others, it would make sense that the owners of the tainted Bitcoin would try to swap theirs out. It appears they tried to do just that, although ShapeShift caught on.
SEE ALSO:Ransomware has been around for almost 30 years, so why does it feel like it's getting worse?"ShapeShift, a digital asset change based in Switzerland, has verified that the WannaCry attacker did breach its terms of service and utilized the services to move a portion of their proceeds of crime," the company said in a statement. "[As] of today, we have taken measures to blacklist all addresses associated with the WannaCry attackers that are known to the ShapeShift team, as is our policy for any transactions we deem breach our terms of service. We are closely watching the situation as it continues to unfold as to block any further addresses associated."
Tweet may have been deleted
We inquired if the funds had been exchanged for Monero, but a spokesperson declined to "provide more detail due to the ongoing nature of the investigation."
Looking forward
So why does all this matter? The ransomed cryptocurrency got moved from three pseudonymous accounts to a bunch of other pseudonymous accounts — who cares, right?
Well, while WannaCry is one of (if not the) biggest case of ransomware in history, other attackers will surely come for the throne. And when they do, they're going to ask for payments in cryptocurrency. What happens to this WannaCry money, and whether the perps get away with it, will either serve as warning or encouragement to those that follow.
And you can bet your last Bitcoin that others willfollow.
Featured Video For You
Step inside the secretive class that turns people into hackers
(责任编辑:产品中心)
- Google Gemini now allows AI
- Madrid to appear as ‘injured party’ in Barca case
- 柑茶盛宴!侨宝金装七月果邀你相约“椰城”海口
- Basketballer paid fortune in case of mistaken identity
- Who is the Dark Wizard in 'The Lord of the Rings: The Rings of Power' Season 2?
- Families of S. Korean detainees in NK appeal to embassies for support
- Ellen DeGeneres gets 'The Bachelorette' started early with a group date on her show
- Police examines cause for Dongtan shopping mall fire
- Here's why San Francisco's vote to ban facial
- DNC 2024 speech: Barack Obama and Michelle Obama have a superpower no other Democrat has.
- 'Chelsea an example of how to handle player pregnancies'
- Joe Biden flexes shiny new .gov address, Twitter very much approves
- Basketballer paid fortune in case of mistaken identity
-
The Best AMD Ryzen Gaming Laptops (So Far)
As a culmination to our testing of Ryzen Mobile 4000-H processors and the various laptops they are f ...[详细] -
Fiorentina deny Milan second spot
MILAN:AC Milan missed the chance to go second in Serie A on Saturday after falling to a 2-1 defeat a ...[详细] -
Twitter joins the fight against anti
Twitter has become the latest social media company to address misinformation about vaccines on its p ...[详细] -
Obama surprises YouTube music twins as they listen to his new playlist
If a surprise guest is going to crash your YouTube video, you'd be hard-pressed to find someone bett ...[详细] -
Apple iPod: The First 10 Years of the Ubiquitous Media Player
#ThrowbackThursday: The iPod is one of the most iconic devices of the 21st century and the product t ...[详细] -
柑茶盛宴!侨宝金装七月果邀你相约“椰城”海口_南方+_南方plus当热情似火的海岛夏日,撞上醇香四溢的新会柑茶,会擦出怎样的火花?明天,江门丽宫国际食品股份有限公司下称“丽宫股份”)携侨宝金装七月果邀 ...[详细]
-
Here's what it's like to use an iPhone to pay for a NYC subway ride
It was over in a split second.With a tap of her iPhone XS to the new OMNY contactless payment termin ...[详细] -
Qatar spied on Swiss prosecutor probing FIFA: report
GENEVA:Qatar spied on a 2017 meeting between a former Swiss attorney general and FIFA president Gian ...[详细] -
采购商+48,英德红茶在泉城济南蹭蹭涨粉_南方+_南方plus8月26日,2024山东济南国际秋季茶产业博览会在舜耕国际会展中心落下帷幕。四天11家来自广东清远的茶企参与现场展销推介,展区内总人流量超 ...[详细]
-
Madrid to appear as ‘injured party’ in Barca case
BARCELONA:Real Madrid will appear in the refereeing corruption case involving Barcelona as an " ...[详细]
Gastro Obscura's Guide to Where to Eat in Nashville
'Chelsea an example of how to handle player pregnancies'
- Deceased K
- Deloitte's CEO gave her 15
- N. Korea demands ethnic Chinese pledge allegiance to Kim's family
- What to expect at WWDC 2019: Power features for everyone
- Tesla considers adding a new ‘stuck detection' feature to Cybertruck. Here’s why.
- 补短板、强教育!港航集团支持建设粤西乡村学校首座图书楼推进乡村振兴
- 名山县公安局积极开展“开门评警走进110”宣传活动