Remember WannaCry? one of hackers bitcoin address is on the move

[Baofeng]

https://www.blockchain.com/btc/address/bc1qnav5fjv4qcz4dlkyq6ncxa5an36ag7e0ee8klm



I'm sure everyone here is still aware and remember this WannaCry ransomware which hit us in 2017 and many fell victim and it was reported that this ransomware stole in the ball park number (low) of around $50k to a million. And last Thursday, one of its known addresses has woke up and the criminals may have a plan to cash it out very soon.

[LFC_Bitcoin]

Interesting that in the UK the ransom was to the NHS (National Health Service). They’re moving for the first time in 3 years.......When the NHS is under its biggest strain ever due to COVID19?

Something in that or just my conspiracy ridden mind trying to add 2 + 2 to get 5?

[NotATether]

It looks like it's paying to many addresses, each of which I suspect is owned by a single person. Criminal enterprises have many members each of whom has a role. Those smaller 0.01BTC payments look like commissions to members while the two whole BTC payments looks like contracting money to two different people for each to independently do their dirty work.

[jacafbiz]

I believe the address is tainted  already, it would be interesting to see how he/she cash out. I know most exchanges would not allow the person to cash out because the big exchanges in the space are now working with the security agencies, maybe he will use one of these Asian exchanges to cash out

[boyptc]

Probably selling it for the need due to lockdown.

I believe the address is tainted  already, it would be interesting to see how he/she cash out. I know most exchanges would not allow the person to cash out because the big exchanges in the space are now working with the security agencies, maybe he will use one of these Asian exchanges to cash out

Binance do blacklist addresses that's involved in shady activities so if ever the guy transfers it to Binance, his funds will be locked immediately.

[kryptqnick]

I wonder if anything can be done about it... If major exchanges block the addresses and don't allow them to sell the money, I don't think it'll work. Obviously, these hackers know better than to show up on a reputable exchange, and I am sure they can find other ways to access the money. If more transactions are performed, though, I think at some point it might be possible to get to some people, but they might have no idea where the money came from... In this kind of case it really sucks that some addresses can't be forced to give the money away or frozen, but that's not gonna happen since such a mechanism can be easily exploited for dubious things.

[tomahawk9]

Some guy on Twitter talking about this recent wannacry movement:


https://twitter.com/briankrebs/status/1251344618047840256

[babykika2027]

Looks like he recieved a lot of money with this virus

[bitbunnny]

Interesting that in the UK the ransom was to the NHS (National Health Service). They’re moving for the first time in 3 years.......When the NHS is under its biggest strain ever due to COVID19?

Something in that or just my conspiracy ridden mind trying to add 2 + 2 to get 5?

There might be a connection, hope that will soon be discovered. Maybe there are some authorities who watch such addresses involved in big patterns and wait for the moves and for the owners to make mistakes.
Maybe the funds will be locked and owner will not have opportunity to sell.and with chance.to be indentified

[BlackFor3st]

https://www.blockchain.com/btc/address/bc1qnav5fjv4qcz4dlkyq6ncxa5an36ag7e0ee8klm



I'm sure everyone here is still aware and remember this WannaCry ransomware which hit us in 2017 and many fell victim and it was reported that this ransomware stole in the ball park number (low) of around $50k to a million. And last Thursday, one of its known addresses has woke up and the criminals may have a plan to cash it out very soon.

Maybe the hacker is thinking that the victims already forgotten what happened and he is now on the move to cash out the money. The hacker can do a lot with it, a ransomware that were able to hack thousands up to a million dollar is not a joke amount.

Let's just hope that it cannot affect the market situation that much so we can enjoy a green color before the halving will occur and also let's just hope that the hacker will be penalize someday with their actions.

[CaVO32]

Interesting that in the UK the ransom was to the NHS (National Health Service). They’re moving for the first time in 3 years.......When the NHS is under its biggest strain ever due to COVID19?

Something in that or just my conspiracy ridden mind trying to add 2 + 2 to get 5?

There might be a connection, hope that will soon be discovered. Maybe there are some authorities who watch such addresses involved in big patterns and wait for the moves and for the owners to make mistakes.
Maybe the funds will be locked and owner will not have opportunity to sell.and with chance.to be indentified

At some point, they need to convert this bitcoin to their fiat. But if these hackers will use coin mixer services, I don't think people can still track them. I think it is now hard to trace them because of those kind of services that will allow them to mix their coins and have an output that will be totally not related to their old addresses. but let us see where that amount will lead to, if in case someone can really track where it is going...

[carlfebz2]

Interesting that in the UK the ransom was to the NHS (National Health Service). They’re moving for the first time in 3 years.......When the NHS is under its biggest strain ever due to COVID19?

Something in that or just my conspiracy ridden mind trying to add 2 + 2 to get 5?

There might be a connection, hope that will soon be discovered. Maybe there are some authorities who watch such addresses involved in big patterns and wait for the moves and for the owners to make mistakes.
Maybe the funds will be locked and owner will not have opportunity to sell.and with chance.to be indentified

At some point, they need to convert this bitcoin to their fiat. But if these hackers will use coin mixer services, I don't think people can still track them. I think it is now hard to trace them because of those kind of services that will allow them to mix their coins and have an output that will be totally not related to their old addresses. but let us see where that amount will lead to, if in case someone can really track where it is going...

Sad reality because no matter how people do follow from address to address if these coins tend to be mixed up or any other means of mixing then tracing or tracking it down would be impossible.
Do really us believe that those coins wont move forever? Of course they would surely move out on a particular time when those hackers will need up some money and they're quite aware on how
things should be done for them not to be traced. *intelligent as always*

[Artemis3]

At some point, they need to convert this bitcoin to their fiat. But if these hackers will use coin mixer services, I don't think people can still track them. I think it is now hard to trace them because of those kind of services that will allow them to mix their coins and have an output that will be totally not related to their old addresses. but let us see where that amount will lead to, if in case someone can really track where it is going...

What if they just buy things from people who accept bitcoin (ie. used miners) and sell them again at cost? Its not like everyone has access to a public database of tainted addresses to check before accepting funds...

Of course i can imagine many more ways to use "tainted" coins and "wash" them clean without ever touching fiat.

[Little Mouse]

Looks like he’s trying to take advantage the situation right now, but luckily we still have an active guy watching this address

It is not a hard thing, you can write some code to het a notification of different address if tx happens. And the number of such watcher is not too low, there are legal investigator too.

Of course i can imagine many more ways to use "tainted" coins and "wash" them clean without ever touching fiat.

There are a lot of ways to wash bitcoin apart from the mixing sites. Mixing site just make it easy.

[pooya87]

https://www.blockchain.com/btc/address/bc1qnav5fjv4qcz4dlkyq6ncxa5an36ag7e0ee8klm

you should first provide additional proof that this is indeed related to Wannacry malware. i did a quick reverse search and i couldn't find any information on that address.

It looks like it's paying to many addresses, each of which I suspect is owned by a single person. Criminal enterprises have many members each of whom has a role. Those smaller 0.01BTC payments look like commissions to members while the two whole BTC payments looks like contracting money to two different people for each to independently do their dirty work.

you have built up the size of the scam in your head, it is nowhere near that big to be called a "criminal enterprise"
if it is indeed related to that scam, then it simply looks like the attacker is mixing his coins. considering the fact that nearly all the outputs are already spent, there is a good chance that many of them belong to different services. like using a quick exchange service, a gambling site, mixers,...

[UserU]

Looks like he recieved a lot of money with this virus

Definitely, for an app that literally locks you out of your PC with every file on the line.

I'm pretty sure most victims didn't see it coming.