Bitcoin Forum
May 11, 2024, 07:38:26 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3] 4 5 6 7 8 9 »  All
  Print  
Author Topic: Monitoring WannaCry hackers' bitcoin addresses in real time  (Read 22954 times)
MingLee
Hero Member
*****
Offline Offline

Activity: 490
Merit: 520


View Profile
May 14, 2017, 07:41:16 PM
 #41

Now how they will spend their hard earned hacking money, considering the addresses are known and probably are blacklisted everywhere?


Putting the coins through a mixing service most likely.

Next logical step maybe is to try to talk to this mixing services and to not let them used their services. But I doubt any agency specially UK and USA will do this for the sake of capturing the culprit. Or maybe the mixing services will do their own action, so that they can't used any exchange to convert the bitcoin they stole to fiat. Its like releasing the bitcoin wallet to all exchanges so that it will be blacklisted.
If they put it into an exchange and take it out again there's a decent chance that they're never really going to be ID'd as long as they use means to conceal where they are and other information about themselves. Sending it into an exchange, waiting, then sending it into a mixer, then another, and then doing whatever, might enough to break up their trail but dedicated individuals might keep diving deeper.
If you see garbage posts (off-topic, trolling, spam, no point, etc.), use the "report to moderator" links. All reports are investigated, though you will rarely be contacted about your reports.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715413106
Hero Member
*
Offline Offline

Posts: 1715413106

View Profile Personal Message (Offline)

Ignore
1715413106
Reply with quote  #2

1715413106
Report to moderator
1715413106
Hero Member
*
Offline Offline

Posts: 1715413106

View Profile Personal Message (Offline)

Ignore
1715413106
Reply with quote  #2

1715413106
Report to moderator
1715413106
Hero Member
*
Offline Offline

Posts: 1715413106

View Profile Personal Message (Offline)

Ignore
1715413106
Reply with quote  #2

1715413106
Report to moderator
btcforall777
Full Member
***
Offline Offline

Activity: 235
Merit: 250


View Profile
May 14, 2017, 07:42:49 PM
 #42

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 14, 2017, 08:16:35 PM
 #43

WannaCry 2.0 is out and, guess what there is no killswitch anymore  Grin

If you wanna protect against such threats, check out https://bitcointalk.org/index.php?topic=1903071.msg18888453#msg18888453
Its impossible to get infected with WannaCry if you follow the whole guide

Was just in to sat the same thing. Crooks read the headlines and fixed their kill switch.

Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 14, 2017, 08:17:48 PM
 #44

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?

I doubt it. The bulk of people being affected don't control the btc market. The whole market is in a bubble. Bubbles burst...eventually.

Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
VarDiff
Full Member
***
Offline Offline

Activity: 196
Merit: 100


View Profile
May 14, 2017, 09:42:40 PM
 #45

Realtime balance for all WannaCry' wallets here:

https://whitesunset.github.io/wannacrypt_balance/
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 14, 2017, 09:44:39 PM
 #46

Realtime balance for all WannaCry' wallets here:

https://whitesunset.github.io/wannacrypt_balance/

Good link. Saves me the time copying and pasting.

I am still not buying that there are only 3 addresses though.

Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
Yakamoto
Legendary
*
Offline Offline

Activity: 1218
Merit: 1007


View Profile
May 14, 2017, 09:55:22 PM
 #47

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?

I doubt it. The bulk of people being affected don't control the btc market. The whole market is in a bubble. Bubbles burst...eventually.
I've been thinking the same thing since we crossed $1,600. It seems like the market is growing too big for its own good and there's a relatively high chance we're in the middle of a bubble.

I do not believe that the ransomware had that much of an effect on the value of Bitcoin, it likely had a small impact on the value at most.
btcforall777
Full Member
***
Offline Offline

Activity: 235
Merit: 250


View Profile
May 14, 2017, 11:22:34 PM
 #48

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?

I doubt it. The bulk of people being affected don't control the btc market. The whole market is in a bubble. Bubbles burst...eventually.

Maybe the market is just looking for a reason or reasons. Like you said people are afraid to jump.
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 14, 2017, 11:35:34 PM
 #49

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?

I doubt it. The bulk of people being affected don't control the btc market. The whole market is in a bubble. Bubbles burst...eventually.

Maybe the market is just looking for a reason or reasons. Like you said people are afraid to jump.

20.95 BTC hardly seems like enough to manipulate the market. Fear could but I don't see the fearful affecting this market because I doubt that many have more than a cursory knowledge of bitcoin.

Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
Harry Callahan
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250


View Profile
May 14, 2017, 11:58:48 PM
 #50

Some of the media are blaming them on the drop in BTC price as they happened simultaneously. Make sense to me. What do you think?
I really do not see any major drop in the price of bitcoin,which charts are you watching. Thought is going for a correction yesterday but the price re bounded pretty soon.I am sure the authorities will be monitoring their moves and if they do something foolish then it is time they go inside bars for a long time. These kind of cheats and extortionist must be brought to the law.
piyo-maru
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
May 15, 2017, 01:10:25 AM
 #51

hi!
Maybe this address is also used.
===
1QAc9S5EmycqjzzWDc1yiWzr9jJLC8sLiY
===

from:
https://twitter.com/malwrhunterteam/status/851687635554848768
aso118
Legendary
*
Offline Offline

Activity: 1918
Merit: 1012


★Nitrogensports.eu★


View Profile
May 15, 2017, 01:28:37 AM
 #52

Addresses are a little over 20 BTC. Never thought they'd see this much money, actually...

Question: Once you pay the ransom, how does the hacker know it was you who paid?

I missed that part. I mean people are sending their BTC to them. How are they tying the payment to the computer?

I was questioning myself exactly this. Maybe the ransomware hás a place to input txid?


Hmm... The ransomware would then need to centrally keep track of which transaction ids have been used.
What is somebody just copies the transaction id once the transaction is broadcast and keys it into the ransomware?


           █████████████████     ████████
          █████████████████     ████████
         █████████████████     ████████
        █████████████████     ████████
       ████████              ████████
      ████████              ████████
     ████████     ███████  ████████     ████████
    ████████     █████████████████     ████████
   ████████     █████████████████     ████████
  ████████     █████████████████     ████████
 ████████     █████████████████     ████████
████████     ████████  ███████     ████████
            ████████              ████████
           ████████              ████████
          ████████     █████████████████
         ████████     █████████████████
        ████████     █████████████████
       ████████     █████████████████
▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
▬▬ THE LARGEST & MOST TRUSTED ▬▬
      BITCOIN SPORTSBOOK     
   ▄▄
██
██
██
██
██
██
██
██
██
██     
██
██
             ▄▄▄▄▀▀▀▀▄
     ▄▄▄▄▀▀▀▀        ▀▄▄▄▄           
▄▀▀▀▀                 █   ▀▀▀▀▀▀▀▄▄
█                    ▀▄          █
 █   ▀▌     ██▄        █          █               
 ▀▄        ▐████▄       █        █
  █        ███████▄     ▀▄       █
   █      ▐████▄█████████████████████▄
   ▀▄     ███████▀                  ▀██
    █      ▀█████    ▄▄        ▄▄    ██
     █       ▀███   ████      ████   ██
     ▀▄        ██    ▀▀        ▀▀    ██
      █        ██        ▄██▄        ██
       █       ██        ▀██▀        ██
       ▀▄      ██    ▄▄        ▄▄    ██
        █      ██   ████      ████   ██
         █▄▄▄▄▀██    ▀▀        ▀▀    ██
               ██▄                  ▄██
                ▀████████████████████▀




  CASINO  ●  DICE  ●  POKER   
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
   24 hour Customer Support   

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 15, 2017, 01:50:31 AM
 #53

hi!
Maybe this address is also used.
===
1QAc9S5EmycqjzzWDc1yiWzr9jJLC8sLiY
===

from:
https://twitter.com/malwrhunterteam/status/851687635554848768

Appears so

https://blockchain.info/address/1QAc9S5EmycqjzzWDc1yiWzr9jJLC8sLiY

12 transactions = 3.25249956 BTC as of 01:50 GMT

Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
Sadlife
Sr. Member
****
Offline Offline

Activity: 1400
Merit: 269



View Profile
May 15, 2017, 01:50:42 AM
 #54

You can actually decrypt the zip file of wannacry ransomware
the password is WNcry@2017.

You can thank me for that if get infected by it. Dont give this hackers bitcoin!

         ▄▄▄▀█▀▀▀█▀▄▄▄
       ▀▀   █     █
    ▀      █       █
  █      ▄█▄       ▐▌
 █▀▀▀▀▀▀█   █▀▀▀▀▀▀▀█
█        ▀█▀        █
█         █         █
█         █        ▄█▄
 █▄▄▄▄▄▄▄▄█▄▄▄▄▄▄▄█   █
  █       ▐▌       ▀█▀
  █▀▀▀▄    █       █
  ▀▄▄▄█▄▄   █     █
         ▀▀▀▄█▄▄▄█▄▀▀▀
.
CRYPTO CASINO
FOR WEB 3.0
.
▄▄▄█▀▀▀
▄▄████▀████
▄████████████
█▀▀    ▀█▄▄▄▄▄
█        ▄█████
█        ▄██████
██▄     ▄███████
████▄▄█▀▀▀██████
████       ▀▀██
███          █
▀█          █
▀▀▄▄ ▄▄▄█▀▀
▀▀▀▄▄▄▄
  ▄ ▄█ ▄
▄▄        ▄████▀       ▄▄
▐█
███▄▄█████████████▄▄████▌
██
██▀▀▀▀▀▀▀████▀▀▀▀▀▀████
▐█▀    ▄▄▄▄ ▀▀        ▀█▌
     █▄████   ▄▀█▄     ▌

     ██████   ▀██▀     █
████▄    ▀▀▀▀           ▄████
█████████████████████████████
████████████████████████████
█████████████████████████
▀███████████████████████▀
██████▌█▌█▌██████▐█▐█▐███████
.
OWL GAMES
|.
Metamask
WalletConnect
Phantom
▄▄▄███ ███▄▄▄
▄▄████▀▀▀▀ ▀▀▀▀████▄▄
▄  ▀▀▀▄▄▀▀▀▀▀▀▀▀▀▄▄▀▀▀  ▄
██▀ ▄▀▀             ▀▀▄ ▀██
██▀ █ ▄     ▄█▄▀      ▄ █ ▀██
██▀ █  ███▄▄███████▄▄███  █ ▀██
█  ▐█▀    ▀█▀    ▀█▌  █
██▄ █ ▐█▌  ▄██   ▄██  ▐█▌ █ ▄██
██▄ ████▄    ▄▄▄    ▄████ ▄██
██▄ ▀████████████████▀ ▄██
▀  ▄▄▄▀▀█████████▀▀▄▄▄  ▀
▀▀████▄▄▄▄ ▄▄▄▄████▀▀
▀▀▀███ ███▀▀▀
.
DICE
SLOTS
BACCARAT
BLACKJACK
.
GAME SHOWS
POKER
ROULETTE
CASUAL GAMES
▄███████████████████▄
██▄▀▄█████████████████████▄▄
███▀█████████████████████████
████████████████████████████▌
█████████▄█▄████████████████
███████▄█████▄█████████████▌
███████▀█████▀█████████████
█████████▄█▄██████████████▌
██████████████████████████
█████████████████▄███████▌
████████████████▀▄▀██████
▀███████████████████▄███▌
              ▀▀▀▀█████▀
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 15, 2017, 01:56:31 AM
 #55

Addresses are a little over 20 BTC. Never thought they'd see this much money, actually...

Question: Once you pay the ransom, how does the hacker know it was you who paid?

I missed that part. I mean people are sending their BTC to them. How are they tying the payment to the computer?

I was questioning myself exactly this. Maybe the ransomware hás a place to input txid?


Hmm... The ransomware would then need to centrally keep track of which transaction ids have been used.
What is somebody just copies the transaction id once the transaction is broadcast and keys it into the ransomware?


Looking at the image in the Twitter link above, perhaps once you send the required amount, it is automatically decrypted. They actually let you decrypt some files at no cost to prove it works. Nice of the crooks to give you a free sample.


Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
coinits (OP)
Legendary
*
Offline Offline

Activity: 1582
Merit: 1019


011110000110110101110010


View Profile
May 15, 2017, 01:57:32 AM
 #56

You can actually decrypt the zip file of wannacry ransomware
the password is WNcry@2017.

You can thank me for that if get infected by it. Dont give this hackers bitcoin!

How do you know this?

I'm not about to test your suggestion though LOL


Jump you fuckers! | The thing about smart motherfuckers is they sound like crazy motherfuckers to dumb motherfuckers. | My sig space for rent for 0.01 btc per week.
doedz
Hero Member
*****
Offline Offline

Activity: 1106
Merit: 502



View Profile
May 15, 2017, 02:02:18 AM
 #57

Very worried, there are people who want to succeed by stealing. In my country, this becomes a serious attack. 2 hospitals have been attacked. Hope to be resolved as soon as possible.

               ▄█▀ ▄▄▄▄ ▀▀▄▄
           ▄█▀ ▄▄█▀▀   ▀█▄▄▀▀█▄▄
          ▀▀  ▀▀          ▀▀█▄█▀
    ▄▄▀  ▄█▀▀                    ▄   ▄▄
  ▄█▀▄▄█▀           ▄▄           ▀▀█▄ ▀█
 ▄▀ █▀     ▄▄██▄▄   ██   ▄▄██▄▄      █▄ █
 █ ▀█   ▄▄█▀▀   ▀██▄▄█▄▄█▀▀  ▀▀██▄▄   █ █
 █     █▀ ▄▄█▀▀█▄▄ ▀██▀  ▄██▀█▄▄ ▀▀█  █ █
 █  ▄  █ ██▀ ▄▄▄ ▀█ ██ █▀▀ ▄▄▄ ▀██ █  █ █
 █ ██  ▀ ██ █▀▀▀█▄▄ ▀█ ▄▄█▀▀▀▀█ ██ ▀  █ █
   ██    █▀ ▄▄█▄  ▀▀███▀▀  ▄▄▄  ▀█    ▀ █
   ██    ▄▄██▀ ▄▄█▄ ██  █▄▄ ▀▀██▄▄      █
 █ ██    ▀▀ ▄▄█▀▀ ▄▄███▄ ▀▀██▄▄ ▀       █
 █  █      ▀▀▀ ▄██▀▀▄█ ▀██▄▄ ▀▀       █ █
 █  █         ▀▀▀   ██    ▀▀▀         █ █
 ▀█ ▀▄▄             ██              ▄█ ▄█
  ▀█▄ ▀▀▄▄          ██          ▄▄█▀ ▄█▀
     ▀█▄▄▀▀▀        ██       ▄▄ ▀▄▄█▀▀
        ▀▀█▄   ▄▄        ▄▄█▀▀   ▀
            ▀█▄▄▀▀█▄▄▄▄▄▀▀ ▄█▀
               ▀▀█▄▄▀▀ ▄▄█▀
 
E M I R E X
─── إمركس ───
   
...Whitepaper...
   
The Infrastructure for the
New Digital Economy
   
▄▄▄▄▄▄▄▄▄▄
▄▄██████████████▄▄
▄████████████████████▄
████████████████████████
▄█████████▀▀▀▀▀▀▀▀▀▀███████
████████▀           ████████
██████████████████████████████
█████████            █████████
█████████  ██████████████████▀
████████▄           ████████
▀█████████▄▄▄▄▄▄▄▄▄▄███████▀
▀████████████████████████▀
▀████████████████████▀
▀███████████████▀▀
▀▀██████▀▀▀
 
E M R X
 
─ Token ─
 
...LEARN MORE...
   
   
   
   
...Register...
[/cen
paul gatt
Hero Member
*****
Offline Offline

Activity: 896
Merit: 500


View Profile
May 15, 2017, 02:03:36 AM
 #58

You can actually decrypt the zip file of wannacry ransomware
the password is WNcry@2017.

You can thank me for that if get infected by it. Dont give this hackers bitcoin!

How do you know this?

I'm not about to test your suggestion though LOL



We can not check his proposal, however, we can see it as a precautionary measure. I think he was one of those who paid the ransom for hackers.
freebutcaged
Hero Member
*****
Offline Offline

Activity: 588
Merit: 541


View Profile
May 15, 2017, 02:59:41 AM
 #59

Very worried, there are people who want to succeed by stealing. In my country, this becomes a serious attack. 2 hospitals have been attacked. Hope to be resolved as soon as possible.
Evidence?
Link?
Reference?
Why hospitals?
Stealing what exactly from them?
Are you in the right thread mate?

Anyone has any fix for me here?
I upgraded from 7 to 10 by official MicroSoft yet I'm getting the activate Windows notification.
Karasugoi
Member
**
Offline Offline

Activity: 113
Merit: 20


View Profile
May 15, 2017, 04:02:17 AM
 #60

You can actually decrypt the zip file of wannacry ransomware
the password is WNcry@2017.

You can thank me for that if get infected by it. Dont give this hackers bitcoin!

How do you know this?

I'm not about to test your suggestion though LOL




Some people give the hackers coins with a message.   

I like this transaction!

96015c757e440554005965b97349234dcae8d4c0f8cc3410a0743cbcc9bacd6c


| S U P E R N E T 's BarterDEX | DECENTRALIZED CRYPTOCURRENCY EXCHANGE |
Developed to Unite Coin Communities | ✔ SECURE ✔ FREE ✔ VISIBILITY ✔ EASY INTEGRATION |
Pages: « 1 2 [3] 4 5 6 7 8 9 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!