{"id":308296,"date":"2017-05-15T21:14:43","date_gmt":"2017-05-15T20:14:43","guid":{"rendered":"http:\/\/rinf.com\/alt-news\/newswire\/wannacry-hackers-have-not-withdrawn-any-ransom-bitcoin-surveillance-shows\/"},"modified":"2017-05-15T21:14:43","modified_gmt":"2017-05-15T20:14:43","slug":"wannacry-hackers-have-not-withdrawn-any-ransom-bitcoin-surveillance-shows","status":"publish","type":"post","link":"http:\/\/rinf.com\/alt-news\/newswire\/wannacry-hackers-have-not-withdrawn-any-ransom-bitcoin-surveillance-shows\/","title":{"rendered":"WannaCry hackers have not withdrawn any ransom bitcoin, surveillance shows"},"content":{"rendered":"\n<div>\n<p><time class=\"date date_article-header\">Published time: 15 May, 2017 15:40 <\/time><\/p>\n<p>        Hackers collecting bitcoin following Friday\u2019s cyberattack have not yet withdrawn any of the digital currency from their accounts, and could have a hard time doing so without getting caught, experts say.<\/p>\n<div class=\"article__text text  js-mediator-article\">\n<div class=\"arcticle__read-more read-more\">\n<p>Read more<\/p>\n<p>    <a class=\"read-more__link\" href=\"http:\/\/www.rt.com\/uk\/388398-nhs-cyber-attack-hunt\/\" target=\"_blank\"><br \/>\n                    <img decoding=\"async\" class=\"read-more__cover\" src=\"https:\/\/cdn.rt.com\/files\/2017.05\/thumbnail\/59198002c36188816f8b457b.jpg\" alt=\"Britain's Health Secretary Jeremy Hunt \u00a9 Toby Melville\"\/><br \/>\n    <\/a>\n<\/div>\n<p>With the help of leaked software developed by the National Security Agency (NSA), malicious ransomware called the Wanna Decryptor \u2013 or WannaCry \u2013 spread to 150 countries.<\/p>\n<p>It wreaked havoc on systems belonging to Britain\u2019s National Health Service (NHS), where hospital computers were shut down and operations cancelled. Other victims included a Spanish telecommunications company and a Russian cell phone operator.<\/p>\n<p>The malware instructs people to pay up to \u00a3460 to one of three bitcoin addresses in order to retain their files, and also displays a countdown clock giving a deadline for the payments.<\/p>\n<p>The hackers, who have locked files on 200,000 computers worldwide, have only made around $500,000 so far, despite the magnitude of the attack. Britain\u2019s National Crime Agency (NCA) is urging victims not to pay the ransom.<\/p>\n<p>Nothing has yet been withdrawn from any of the bitcoin accounts, and law enforcement agencies watching them say the perpetrators could be difficult to trace until they access some of the ransom money.<\/p>\n<p><iframe loading=\"lazy\" width=\"900\" height=\"506\" src=\"https:\/\/www.youtube.com\/embed\/S84H0xcYn6w\" frameborder=\"0\" allowfullscreen=\"\"><\/iframe><\/p>\n<p>Ransomware bounties are usually paid in bitcoin, a digital currency that keeps its users anonymous. Bitcoin is also traceable, however, as every transaction is tied to publicly-accessible accounts, typically called wallets. The wallets show each payment that victims have sent in hopes of regaining access to their files.<\/p>\n<p>New payments are coming in regularly, according to Ransom Tracker, a Twitter bot that is sending out automated messages and posting every time a payment is made to one of the three bitcoin addresses.<\/p>\n<p>Oliver Gower, the deputy director of the NCA\u2019s national cybercrime unit, has vowed to track down the hackers.<\/p>\n<p><em>\u201cCybercriminals may believe they are anonymous but we will use all the tools at our disposal to bring them to justice,\u201d<\/em> he told the Times.<\/p>\n<p>Rob Wainwright, the director of Europol, told the newspaper that security officials believe the hack is the work of criminals, rather than a state-sponsored attack.<\/p>\n<p><em>\u201cOur working assumption, as with every other major ransomware attack, is that this is a cybercriminal attack. Unless we have something definitive to point us in another direction that\u2019s our assumption at the moment. As in any investigation, we keep our mind open.\u201d<\/em><\/p>\n<\/div>\n<\/div>\n<p>Via <a href=\"https:\/\/www.rt.com\/uk\/388447-wannacry-hacker-bitcoin-nhs\/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=RSS\">RT<\/a>. This piece was reprinted by <a href=\"http:\/\/rinf.com\">RINF Alternative News<\/a> with permission or license.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Published time: 15 May, 2017 15:40 Hackers collecting bitcoin following Friday\u2019s cyberattack have not yet withdrawn any of the digital currency from their accounts, and could have a hard time doing so without getting caught, experts say. Read more With the help of leaked software developed by the National Security Agency (NSA), malicious ransomware called [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":308297,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[519],"tags":[],"class_list":{"0":"post-308296","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-newswire"},"_links":{"self":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts\/308296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/comments?post=308296"}],"version-history":[{"count":0,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/posts\/308296\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/media\/308297"}],"wp:attachment":[{"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/media?parent=308296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/categories?post=308296"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/rinf.com\/alt-news\/wp-json\/wp\/v2\/tags?post=308296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}