Re: Monitoring WannaCry hackers' bitcoin addresses in real time

Quote from: Qunenin on May 13, 2017, 05:13:35 PM

Quote from: coinits on May 13, 2017, 04:13:09 PM

For a global attack they have not collected a lot of bitcoin yet. Results as of 16:00 GMT

Address 1: 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

live link: https://blockchain.info/address/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

31 transactions = 4.65255659 BTC

Address 2: 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn

live link: https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn

27 transactions = 3.10004389 BTC

Wallet 3: 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94

live link: https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94

36 transactions = 6.53259945 BTC

~ 14.28 BTC x $1735.35 per BTC = $24,781 ransom paid thus far.

Add more addresses as you find them.

As compare to a massive world wide attack, the amount collected so far is not as much as it should be. I also wonder if the people after paying the ransom, were there computer back to normal or still they remain affected by virus ?

I assume the following:
- that some institutions reverted to clean backups
- there are more than 3 addresses
- spread was stopped by a blogger who discovered a kill switch in the virus (this has been verified) - https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ransomware-cyber-attack