close
close

60k Bitcoin addresses leaked as a attraction is hacked by ransomware

Almost 60,000 Bitcoin addresses associated with the ransomware infrastructure of attract bit were leaked after Hacker violated the group's Dark Web Affiliate panel.

The leak contained a MySQL database dump that was released online. It contained crypto-related information with which blockchain analysts could track the group's illegal financial flows.

Ransomware is a kind of malware used by malicious actors. It blocks the targets or computer systems of the goal and makes them inaccessible. The attackers usually request a ransom payment, often in digital assets such as Bitcoin (BTC), in return for a decryption key to unlock the files.

Lockbit is one of the most notorious crypto ransomware groups. In February 2024, 10 countries started a joint operation to disturb the group and explained that the organization had led billions to compensation for the key infrastructure.

Source: Reyxbf

No Bitcoin -private keys are leaked through

While almost 60,000 Bitcoin letters were leaked, no private keys were included. An X user shared a conversation with an attraction operator, which confirmed the violation. However, the attraction person said that no private keys or data was lost.

Nevertheless, Bleeping Computer analysts said that the database contained 20 tables, including a “builds” table. This included individual ransomware builds created by the organization partners. The data also identified some of the target companies for the builds.

In addition, the leaked database also contained a “chat” table. This table contained over 4,400 negotiation messages between the victims and the ransomware organization.

Related: Crypto crime in 2024 probably exceeded $ 51 billion, much higher than reported: chain analysis

Lockbit -hack that is bound to Everest Ransomware Breach

It is unclear who is behind the violation and how they are in Lockbits operations, but the Bleeping computer analysts said that the message used in the Everest Ransomware -Site -Site -Site -Site -Site corresponded to those used in attract bit. The analysts suggested that there may be a connection between the two incidents.

The violation raised the role that crypto plays in the ransomware economy. Each victim is usually assigned an address to pay their ransom so that the affiliated companies monitor the payments and at the same time try to disguise connections to their main letter pockets.

The exposure of the addresses enables law enforcement and blockchain investigators to pursue patterns and to combine potentially past ransom payments with known items.

https://www.youtube.com/watch?v=NDV0RFEHETQ

Magazine: Adam Back says Bitcoin price cycle “10x larger”, but will still break crucial over 100,000 US dollars