£100,000 of bitcoin withdrawn from online accounts after Wannacry cyber attack

£100,000 of bitcoin withdrawn from online accounts after Wannacry cyber attack

More than £100,000 of digital currency bitcoin paid to hackers by victims of the WannaCry ransomware attack has been withdrawn from their online wallets.

The cyber attack struck the NHS in May, as well as hundreds of other businesses worldwide, causing days of disruption by locking users out of their files and demanding bitcoin payments in order to release them.

The new bitcoin activity was spotted by a Twitter bot - created by Quartz journalist Keith Collins - to track activity around the digital wallets linked to WannaCry.

The bot recorded a series of withdrawals from the wallets on Thursday, and bitcoin monitoring sites now show all of the wallets known to be linked to the attack as empty.

Every bitcoin transaction is publicly visible, but account holders themselves are anonymous.

No one has officially claimed responsibility for the WannaCry attack, but some experts have linked it to Lazarus, the group also linked with the Sony Pictures hack in 2014.

At the time of the WannaCry attack, victims were asked to pay around £230 in the virtual currency in order to regain control of their systems.

However, cyber security experts advised victims not to pay, as it could encourage other cyber criminals and would not guarantee access was restored.

Some experts have suggested the hackers will now use a 'mixer', where the bitcoin is broken up and scattered through a wider series of payments, in order to make it harder to trace.

Ilia Kolochenko, chief executive of cyber security firm High-Tech Bridge said: "Professional cyber criminals have well-established contacts with organised crime, financial institutions and even law enforcement agencies.

"It's a not a big problem to find a virtually untraceable way for bitcoin laundering. A lot of amateur cyber criminals were traced by various mistakes when they were trying to 'cash out', but professionals have different ways to stay in the shadows."

More on this topic

Cyber attack hero due in US court over software to harvest bank detailsCyber attack hero due in US court over software to harvest bank details

Expert who found Wannacry kill switch arrested in different malware probeExpert who found Wannacry kill switch arrested in different malware probe

All HSE systems due back online today after WannaCry virusAll HSE systems due back online today after WannaCry virus

Don’t WannaCry? Here’s NUI Galway’s four step guide to beating ransomwareDon’t WannaCry? Here’s NUI Galway’s four step guide to beating ransomware

More in this Section

China welcomes preliminary deal in trade war it blames on USChina welcomes preliminary deal in trade war it blames on US

Irish shares climb as election drives sterlingIrish shares climb as election drives sterling

Profits fall at hotel groupProfits fall at hotel group

Profits rise 35% as gym group Flyefit expandsProfits rise 35% as gym group Flyefit expands


Lifestyle

Want to be cultured this Christmas? From TV to podcasts to books, Ed Power has the definite list of everything you missed this year - so you can curl up on the couch and catch upThe definite list of everything you missed this year

Artist Ciara Rodgers teaches older people how to rediscover their creativity and regain confidence, says Rowena WalshBrush with art: Discovering your creative side in later life

Furniture, paintings, jewellery and silver are on offer at James Adam in Dublin, writes Des O’SullivanAll set for home run: See what's on offer at the James Adam sale in Dublin

It’s not too late to hunt out a unique gift. Des O’Sullivan previews sales in the lead-up to the festive seasonA flurry of auctions in Munster sets the scene for Christmas

More From The Irish Examiner