for anyone saying this is outright dumb, remember they are criminals. They are probably receiving the money in different, probably years old, honest accounts.

for anyone saying this is outright dumb, remember they are criminals. They are probably receiving the money in different, probably years old, honest accounts. Which the real owner is compromised (e.g. hacked. or being coerced to send the payment out as soon as it is received under threats, etc) Not seeing this is why developers should not assume they can wear the threat modeler hat. Also, when you are a B2C like ransonware folks are, it is very hard to make the victim get bitcoins even if their life depends on the data you are holding hostage. Using weechat in china gets them zero attrition.