For 3 months since the global WannaCry virus attack, the ransom funds were kept untouched in 3 Bitcoin accounts. Now, more than $140,000 worth of online currency Bitcoin has been cashed out from three accounts linked to the ransomware that infected more than 230,000 computers in 150 countries around the world in May.
The WannaCry victims were asked to pay a $300 ransom in Bitcoins in order to have their files unlocked and return their PCs to a working state.
The online wallets contained a total of about 52.2 BTC. The funds were moved between 24 July and 3 August from the three main accounts tied to WannaCry to nine other Bitcoin accounts. Some of Bitcoins later were moved to an exchange platform Shapeshift.io in an attempt to convert them to another more anonymous virtual currency called Monero.
However, the attempt to launder the cash via the Shapeshift.io platform was blocked soon after it was told what was happening.
“As of today, we have taken measures to blacklist all addresses associated with the WannaCry attackers that are known to the ShapeShift team. Additionally, we are engaging directly with law enforcement involved with the WannaCry case and will assist them with any needs they may request to apprehend the perpetrators”, a spokesman said.
The balance of all of the wallets associated with the WannaCry ransomware attack is now zero.