NotPetya Ransomware Extortionists are Moving their Ill-Gotten Bitcoin

As reported by CCN, last week a global ransomware campaign, using a strain dubbed NotPetya by Kaspersky Labs, hit computers in over 60 countries and managed to receive over four bitcoins, over $10,000, from it. The payout is significantly lower than expected.

Get exclusive analysis of bitcoin and learn from our trading tutorials. Join Hacked.com for just $39 now.

In May a ransomware strain known as WannaCry managed to raise over $130,000 in bitcoin from a global cyberattack. These recent payouts are relatively meaningless when compared to 2014’s CryptoWall ransomware, which managed to raise a whopping $325 million.

NotPetya’s bitcoin wallet, 1Mz7153HMuxXTuR2R1t78mGSdzaAtNbBWX, didn’t receive a lot of bitcoin after security experts revealed that the ransomware used faulty encryption, making file recovery impossible. Furthermore, the group’s email provider, German company Posteo, blocked their access to it, preventing them from reading emails and replying with instructions on how to decrypt.

Now, a Twitter bot designed to track transactions associated with NotPetya’s ransomware wallet, revealed that the group is moving its bitcoins. Most of its earnings – 3.96298755 bitcoins, worth over $10,000 – were sent to a new address, 1Ftixp78FjTWFi3ssJjBw5NqKf5ZPQjXBb, and two smaller payments were sent to addresses belonging PasteBin and DeepPaste.

Follow
petya_payments