Today’s widely reported WannaCry ransomware attack is extensive, growing and has already yielded ~USD$12k in profits according to a quick analysis of the BTC addresses involved. On May 12 the 3 bitcoin addresses known to be receiving extortion payments show receipt of 6.49372428 BTC in 39 separate transactions with ransom varying between .15 to .30 BTC each. None of the balances have been moved to new bitcoin addresses since receipt.
The WannaCry Ransomware Bitcoin Addresses
As of 4:30PM ET 3.68309452 BTC in 21 transactions
| BTC Address | Cur. Bal. | Total Rec. | # Trans. |
|---|---|---|---|
| 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw | 0.79108417 | 0.79108417 | 4 |
| 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 | 2.23710431 | 2.23710431 | 12 |
| 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn | 0.65490604 | 0.65490604 | 5 |
As of 11:00pm ET 6.49372428 BTC in 39 transactions
| BTC Address | Cur. Bal. | Total Rec. | # Trans. |
|---|---|---|---|
| 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw | 1.87491577 | 1.87491577 | 12 |
| 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 | 3.42483102 | 3.42483102 | 18 |
| 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn | 1.19397749 | 1.19397749 | 9 |
As of 11:30am ET May 13 14.08007493 BTC on 92 payments
| BTC Address | Cur. Bal. | Total Rec. | # Trans. |
|---|---|---|---|
| 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw | 6.35659945 | 6.35659945 | 35 |
| 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 | 4.62343159 | 4.62343159 | 30 |
| 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn | 3.10004389 | 3.10004389 | 27 |
You can “watch” these addresses to be notified twice daily by email alert once these coins start moving. Just click “Watch” from any Bitcoin Address Report page.