In a way, this could be good for cryptocurrency. The remaining 15 percent was funneled through accounts presumably controlled by DarkSide developers. Tom Robinson of the blockchain analytics company Elliptic, who has been tracking the ransom payments, wrote in a blog post that the account the feds took over appeared to hold the 85 percent share of the ransom that went to the client of DarkSide, the Russian “ransomware as a service” hacking group whose software was behind the attack. According to court documents, the feds got the account’s “private key,” a crucial password that gives the owner complete control over the funds inside. Eventually, the funds landed in an account that a federal judge allowed the F.B.I. The hackers moved the ransom through dozens of anonymous accounts, which can be tracked on the blockchain, the public ledger of all Bitcoin transactions. task force had recaptured most of the Bitcoins by, in essence, hacking the hackers.īitcoin transactions are anonymous but not untraceable.
But federal officials said that a new F.B.I.
The ransomware attack shut down the Colonial Pipeline for about a week, prompting fuel shortages and price spikes, until the company paid hackers more than $4 million worth of Bitcoin.
pipeline operator paid to a Russian hacking collective last month. The Justice Department said yesterday that it had traced and seized much of the ransom that a major U.S.
