Quote from: Wintermute on May 12, 2012, 01:34:20 PM

If I am not mistaken the message is (adding missing "0" at the end and converting to ASCII):

"expect mass leak soon"

No, you are not mistaken:

Quote from: organofcorti on May 12, 2012, 04:17:21 AM

Quote from: homer on May 12, 2012, 04:05:24 AM

Quote from: homer on May 12, 2012, 03:13:32 AM

They are on the move again.

http://blockchain.info/tx-index/5484758/c141115ff13ad9331e0d46776d850f06083a60fab88b15a2a2df35f2fdf565da

Seven 2600 btc transactions, and that one for 347.66367623 BTC goes to
http://blockchain.info/address/1EMLwAwseowTkDtKnEHRKrwQvzi4HShxSX which then has splits into a bunch of smaller transactions. WTF? how do you follow this many splits?

found something strange while following the stolen coins. Sent from the thief to many small accounts and one large one.
http://blockchain.info/address/1EMLwAwseowTkDtKnEHRKrwQvzi4HShxSX

1.01100101 BTC
2.01111 BTC
3.0111 BTC
4.01100101 BTC
5.01100011 BTC
6.011101 BTC
7.001 BTC
116.4569963 BTC
8.01101101 BTC
9.01100001 BTC
10.01110011 BTC
11.01110011 BTC
12.001 BTC
13.011011 BTC
14.01100101 BTC
15.01100001 BTC
16.01101011 BTC
17.001 BTC
18.01110011 BTC
19.01101111 BTC
20.01101111 BTC
21.0110111 BTC

Why would they split it up like that? are they trying to hide it by making it whole bunch of small transfers?

He's just fucking with you. The 8 digit remainder is binary. Convert the first 7 to ascii and you get "expect ".

Edit: the whole 21 characters spell "expect mass leak soon".

Edit 2: and given the first three characters of the address are EML, it might have been a vanity account.