This Bitcoin Ransomware Rakes in $150 Million in BTC

A new report by two cybersecurity firms has revealed that one ransomware family is particularly successful, raking in over $150 million in bitcoin. The ransom payments “sometimes amount to millions of dollars and typically run in the hundreds of thousands range.”

Ransomware Makes $150 Million in Bitcoin

The Ryuk ransomware family has raked in $150 million in bitcoin, according to a joint report by cybersecurity firms Advanced Intel and Hyas. “The Ryuk family of ransomware has been particularly successful in economic terms as well as having a disruptive impact on many industries around the world,” the report authors described, adding:

Our research involved tracing payments involving 61 deposit addresses attributed to Ryuk ransomware. The Ryuk criminals send a majority of their bitcoin to exchanges through an intermediary to cash out.

The ransomware family Ryuk was first discovered in the wild in August 2018. Its targets tend to be high-profile organizations, including hospitals and newspapers.

The report authors explained that “Significant volumes of bitcoin move from the laundering service to Binance, Huobi, and crime markets that we have identified through traced payments.” Besides the two crypto exchanges, “there are significant flows of cryptocurrency to a collection of addresses that are too small to be an established exchange and probably represent a crime service that exchanges the cryptocurrency for local currency or another digital currency.”

if (!window.GrowJs) { (function () { var s = document.createElement(‘script’); s.async = true; s.type = ‘text/javascript’; s.src = ‘https://bitcoinads.growadvertising.com/adserve/app’; var n = document.getElementsByTagName(“script”)[0]; n.parentNode.insertBefore(s, n); }()); } var GrowJs = GrowJs || {}; GrowJs.ads = GrowJs.ads || []; GrowJs.ads.push({ node: document.currentScript.parentElement, handler: function (node) { var banner = GrowJs.createBanner(node, 31, [300, 250], null, []); GrowJs.showBanner(banner.index); } });

Furthermore, the report notes that “Ryuk receives a significant amount of their ransom payments from a well-known broker that makes payments on behalf of the ransomware victims. These payments sometimes amount to millions of dollars and typically run in the hundreds of thousands range,” adding:

After tracing bitcoin transactions for the known addresses attributable to Ryuk, the authors estimate that the criminal enterprise may be worth more than $150,000,000.

What do you think about this ransomware raking in $150 million in bitcoin? Let us know in the comments section below.

[…]
Learn more