In 64% of cases, hackers withdraw funds through cryptocurrency exchanges.

According to the analytical firm Chainalysis, hackers using encryption viruses, in 64% of cases withdraw funds through cryptocurrency exchanges.
Please note that after entering the infected system, encryption viruses encrypt all data and then issue a ransom demand. In this case, a ransom is usually required in Bitcoin or the anonymous Monero cryptocurrency.
The researchers checked a significant number of cryptocurrency exchanges and found that at least 38 of them accept funds from addresses associated with hacking activities.
Analysts also reported that 12% of infections were related to services that hide transactions, and 6% to peer-to-peer networks. In other cases, trade service providers or darknet were used.
According to the researchers, hackers often withdraw funds through entire networks of cashing money, while the crypto-currency community pays attention only to the wallets of exchanges from which the funds are withdrawn.