4 ms·
Going through their wallets it looks like they've gotten 32 pay outs, some for more than 300 USD. Are there any addresses that they are using outside of the fou
by placeybordeaux 9y ago
Going through their wallets it looks like they've gotten 32 pay outs, some for more than 300 USD. Are there any addresses that they are using outside of the four listed int he article?
It'd be an interesting project to try and track where these funds go and where they came from.
https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6N... - 11
https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNX... - 4
https://blockchain.info/address/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw https://blockchain.info/address/12t9YDPgwueZ9NyMgw519p7AA8is... - 6
https://blockchain.info/address/1QAc9S5EmycqjzzWDc1yiWzr9jJLC8sLiY https://blockchain.info/address/1QAc9S5EmycqjzzWDc1yiWzr9jJL... - 11
- doomrobo 9y agoThey'll probably be tumbled (i.e Bitcoin laundering), meaning that we'll get no info from the transactions at all.
- placeybordeaux 9y agoI haven't looked into tumbling recently, whats the volume look like these days? So far the attack has yielded less than 5 btc, I'd guess that amount can be laundered safely. Whats the current limit?
- billharrison 9y agoI can't speak for a current safe limit, but it isn't very hard to transfer funds between various cryptocurrencies. Tumbling is not secure with a large amount of coins. All you have to do is monitor all transactions and figure out what went in and what came back out. If you start splitting things off in small amounts on various blockchains things become much harder to track. This is assuming the attackers know what they are doing. I would be against that.
- doomrobo 9y agoA cursory check doesn't bring up any Helix (the largest tumbler out there) stats. I'm not certain they even make that info public. Also I wouldn't know how to measure the level of privacy in this context.
- 20delta 9y agoYou don't have to worry about tumbling anymore. You can use XMR.to, Shapeshift.io, or Changelly.com over TOR to move funds directly into another another blockchain currency. So have fun following things around Bitcoin blockchain like some high tech sleuth, but thats a wild goose chase. I buy all my cryptocurrencies through those kind of services nowadays, because there's no risk or temptation to keep coins on custodial exchanges, instead of in a private wallet. As well as no worries about withdrawal limits (although shapeshift has fairly low per transaction limits, just make an additional transaction) For unlinking the transaction, the only currency you want to cross-chain into is Monero. With its Ring Signatures and Stealth Addresses it is a private blockchain by default (in comparison with some other cryptocurrencies that have a secondary optional privacy feature like Zcash/Shadowcash/Dash). I'm actually surprised that the ransomware isn't taking Monero directly yet as some exchanges have direct Monero/USD markets already.
- isseu 9y ago> I'm actually surprised that the ransomware isn't taking Monero directly yet as some exchanges have direct Monero/USD markets already. Buying Bitcoin is much easier
- 20delta 9y agoMarginally. And the malware controllers can just as easily add instruction to users to shapeshift bitcoin to their Monero address
- placeybordeaux 9y agoThanks for the info, I finally took the time to read the Monero whitepaper, cool stuff!
- 20delta 9y agowhere did you get these addresses from? I only get the 115p address on a retweeted photo from an NHS computer
- andrewke 9y agoThey were posted in the Kaspersky analysis https://securelist.com/blog/incidents/78351/wannacry-ransomware-used-in-widespread-attacks-all-over-the-world/ https://securelist.com/blog/incidents/78351/wannacry-ransomw...
- olivier1664 9y agoDoes that means the wannacrypt attack has paid only 60,000$ ?
- placeybordeaux 9y agoSo far, it looks like tx are still rolling in. They haven't cashed it out yet, so they really have ~35 BTC, nothing in USD yet.