{"id":437,"date":"2017-05-12T20:24:20","date_gmt":"2017-05-12T20:24:20","guid":{"rendered":"http:\/\/bitcoinwhoswho.com\/blog\/?p=437"},"modified":"2017-05-17T03:53:44","modified_gmt":"2017-05-17T03:53:44","slug":"wannacry-ransomware-extorts-33-payments-worth-6-93-btc-so-far-today","status":"publish","type":"post","link":"https:\/\/www.bitcoinwhoswho.com\/blog\/2017\/05\/12\/wannacry-ransomware-extorts-33-payments-worth-6-93-btc-so-far-today\/","title":{"rendered":"WannaCry Ransomware Extorts 39 Payments Worth 6.49 BTC &#8211; DAY 1"},"content":{"rendered":"<p><figure id=\"attachment_449\" aria-describedby=\"caption-attachment-449\" style=\"width: 750px\" class=\"wp-caption alignleft\"><img loading=\"lazy\" src=\"http:\/\/bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2017\/05\/wannacry_05-1024x774-750x440.png\" alt=\"\" width=\"750\" height=\"440\" class=\"size-full wp-image-449\" srcset=\"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2017\/05\/wannacry_05-1024x774-750x440.png 750w, https:\/\/www.bitcoinwhoswho.com\/blog\/wp-content\/uploads\/2017\/05\/wannacry_05-1024x774-750x440-300x176.png 300w\" sizes=\"(max-width: 750px) 100vw, 750px\" \/><figcaption id=\"caption-attachment-449\" class=\"wp-caption-text\">WannaCry Ransom Note<\/figcaption><\/figure>UPDATE: WannaCry Ransomware Attack up to 14.08007493 BTC on 92 payments as of 11:30am ET May 13. Balances more than doubled in 12 hours.<\/p>\n<p>Today&#8217;s widely <a href=\"http:\/\/www.bbc.com\/news\/technology-39901382\">reported<\/a> WannaCry ransomware attack is extensive, growing and has already yielded ~USD$12k in profits according to a quick analysis of the BTC addresses involved. On May 12 the 3 bitcoin addresses known to be receiving extortion payments show receipt of 6.49372428 BTC in 39 separate transactions with ransom varying between .15 to .30 BTC each. None of the balances have been moved to new bitcoin addresses since receipt.<\/p>\n<p><strong>The WannaCry Ransomware Bitcoin Addresses<\/strong><!--more--><\/p>\n<p>As of 4:30PM ET 3.68309452 BTC in 21 transactions<\/p>\n<style type=\"text\/css\">\n\ttable.tableizer-table {\n\t\tfont-size: 12px;\n\t\tborder: 1px solid #CCC; \n\t\tfont-family: Arial, Helvetica, sans-serif;\n\t} \n\t.tableizer-table td {\n\t\tpadding: 4px;\n\t\tmargin: 3px;\n\t\tborder: 1px solid #CCC;\n\t}\n\t.tableizer-table th {\n\t\tbackground-color: #000000; \n\t\tcolor: #FFF;\n\t\tfont-weight: bold;\n\t}\n<\/style>\n<table class=\"tableizer-table\">\n<thead>\n<tr class=\"tableizer-firstrow\">\n<th>BTC Address<\/th>\n<th>Cur. Bal.<\/th>\n<th>Total Rec.<\/th>\n<th># Trans.<\/th>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw\">12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw<\/a><\/td>\n<td>0.79108417<\/td>\n<td>0.79108417<\/td>\n<td>4<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94\">13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94<\/a><\/td>\n<td>2.23710431<\/td>\n<td>2.23710431<\/td>\n<td>12<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn\">115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn<\/a><\/td>\n<td>0.65490604<\/td>\n<td>0.65490604<\/td>\n<td>5<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>As of 11:00pm ET 6.49372428 BTC in 39 transactions<\/p>\n<style type=\"text\/css\">\n\ttable.tableizer-table {\n\t\tfont-size: 12px;\n\t\tborder: 1px solid #CCC; \n\t\tfont-family: Arial, Helvetica, sans-serif;\n\t} \n\t.tableizer-table td {\n\t\tpadding: 4px;\n\t\tmargin: 3px;\n\t\tborder: 1px solid #CCC;\n\t}\n\t.tableizer-table th {\n\t\tbackground-color: #000000; \n\t\tcolor: #FFF;\n\t\tfont-weight: bold;\n\t}\n<\/style>\n<table class=\"tableizer-table\">\n<thead>\n<tr class=\"tableizer-firstrow\">\n<th>BTC Address<\/th>\n<th>Cur. Bal.<\/th>\n<th>Total Rec.<\/th>\n<th># Trans.<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw\">12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw<\/a><\/td>\n<td>1.87491577<\/td>\n<td>1.87491577<\/td>\n<td>12<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94\">13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94<\/a><\/td>\n<td>3.42483102<\/td>\n<td>3.42483102<\/td>\n<td>18<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn\">115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn<\/a><\/td>\n<td>1.19397749<\/td>\n<td>1.19397749<\/td>\n<td>9<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>As of 11:30am ET May 13 14.08007493 BTC on 92 payments<\/p>\n<style type=\"text\/css\">\n\ttable.tableizer-table {\n\t\tfont-size: 12px;\n\t\tborder: 1px solid #CCC; \n\t\tfont-family: Arial, Helvetica, sans-serif;\n\t} \n\t.tableizer-table td {\n\t\tpadding: 4px;\n\t\tmargin: 3px;\n\t\tborder: 1px solid #CCC;\n\t}\n\t.tableizer-table th {\n\t\tbackground-color: #000000; \n\t\tcolor: #FFF;\n\t\tfont-weight: bold;\n\t}\n<\/style>\n<table class=\"tableizer-table\">\n<thead>\n<tr class=\"tableizer-firstrow\">\n<th>BTC Address<\/th>\n<th>Cur. Bal.<\/th>\n<th>Total Rec.<\/th>\n<th># Trans.<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw\">12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw<\/a><\/td>\n<td>6.35659945<\/td>\n<td>6.35659945<\/td>\n<td>35<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94\">13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94<\/a><\/td>\n<td>4.62343159<\/td>\n<td>4.62343159<\/td>\n<td>30<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/bitcoinwhoswho.com\/address\/115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn\">115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn<\/a><\/td>\n<td>3.10004389<\/td>\n<td>3.10004389<\/td>\n<td>27<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>You can &#8220;watch&#8221; these addresses to be notified twice daily by email alert once these coins start moving. Just click &#8220;Watch&#8221; from any Bitcoin Address Report page.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>UPDATE: WannaCry Ransomware Attack up to 14.08007493 BTC on 92 payments as of 11:30am ET May 13. Balances more than doubled in 12 hours. Today&#8217;s widely reported WannaCry ransomware attack is extensive, growing and has already yielded ~USD$12k in profits according to a quick analysis of the BTC addresses involved. On May 12 the 3 &hellip; <a href=\"https:\/\/www.bitcoinwhoswho.com\/blog\/2017\/05\/12\/wannacry-ransomware-extorts-33-payments-worth-6-93-btc-so-far-today\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">WannaCry Ransomware Extorts 39 Payments Worth 6.49 BTC &#8211; DAY 1<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11,31],"tags":[30,42],"_links":{"self":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/437"}],"collection":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/comments?post=437"}],"version-history":[{"count":13,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/437\/revisions"}],"predecessor-version":[{"id":471,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/posts\/437\/revisions\/471"}],"wp:attachment":[{"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/media?parent=437"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/categories?post=437"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bitcoinwhoswho.com\/blog\/wp-json\/wp\/v2\/tags?post=437"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}