📣 Ransomwhere now has over $1 billion in payments, making it the first public ransomware payments dataset over a billion dollars.

This is compared to $30 million three years ago when Ransomwhere was launched.

Access the dataset here: http://ransomwhe.re

Read the latest research: https://arxiv.org/abs/2408.15420

$60M in ransomware payments to the Cuba ransomware group attributed by FBI and CISA have been added to Ransomwhere and are available for download. This makes Cuba the highest grossing ransomware group on the site (likely due to having more complete data around the group).

Download the data: https://ransomwhe.re

Source: https://cisa.gov/uscert/ncas/alerts/aa22-335a

A $119K LockBit payment has been added to http://ransomwhe.re. This payment is based on DOJ's complaint against a LockBit operator. We identified the wallet based on public Blockchain data.

Operator wallet: https://blockchain.com/btc/address/1MCGXCFMo2SeJzR3BdC2xbK6mPwf5uAoFZ

Payment wallet: http://blockchain.com/btc/address/bc1q9x0sg3w0gwl0yfyml78zp7mdpuan005scwvytu

To identify the wallet, we searched on Blockchair for the exact transaction amount mentioned in the complaint. This yielded 4 wallets, 1 of which matched the date of the DOJ complaint.

https://blockchair.com/bitcoin/transactions?s=time(desc)&q=output_total(80574055)#f=hash,block_id,input_count,output_count,time,output_total,output_total_usd,fee_usd,input_total,input_total_usd

Complaint: https://justice.gov/usao-nj/press-release/file/1551116/download