<blockquote>
  <p>Has any malware successfully used this technique yet, using Bitcoin?</p>
</blockquote>

<p>I got around 10 people contacting me via localbitcoins in a day asking to buy exactly 2BTC to unlock their computers. I'd say it's pretty effective. I did get the addresses but don't seem to have it around now, when I looked around 30 people total had been paid out to two addresses. </p>

CC BY-SA 3.0
2013-10-21T00:58:13.393Z
2013-10-21T00:58:13.393Z
Anonymous
<p>I read <a href="http://www.stuff.co.nz/waikato-times/business/technology/9293900/Nasty-virus-holds-computer-to-ransom" rel="noreferrer">this article</a> recently, talking about the emergence of &quot;ransomware&quot;. An excerpt is:</p>
<blockquote>
<p>The newer CryptoLocker differs by taking the ransom to a whole new level. Upon infection it doesn't make a fanfare, to the contrary, it acts in stealth performing a nefarious task in the background. You probably won't even notice the task running, as CryptoLocker silently encrypts your data files, including your precious family photos, vital Microsoft Word documents, spreadsheets, and email.</p>
<p>Upon completing the encryption of your files, it sends the unique key required for decrypting and unlocking your files over the internet to a secure remote server, and then the ransom begins. Immediately the CryptoLocker window displays containing the image of a shield, instructional text, and a countdown timer.</p>
<p>It's important to understand that the ransomware is not bluffing. Unless you pay the ransom, you will lose access to any files that have been encrypted. Once the countdown starts you have about three days to make payment, otherwise the key is destroyed and you permanently lose the ability to decrypt your files.</p>
</blockquote>
<p>It seems like a logical step to request payment through Bitcoin, given that it would be much harder to track down the person receiving the payment than most other options. <a href="http://arstechnica.com/security/2013/10/youre-infected-if-you-want-to-see-your-data-again-pay-us-300-in-bitcoins/" rel="noreferrer">Sure enough, it's been done already</a>! Admittedly, it could be a pretty daunting task for your average Joe Bloggs to figure out how to safely pay within 3 days using Bitcoin, but obviously the time limit can be made flexible.</p>
<p><strong>Has any malware successfully used this technique yet, using Bitcoin? If so, does anyone know of a receiving address used more than once, thus giving an indication of how many people are paying a ransom?</strong></p>
<p>Are there any websites that have statistics on such incidents?</p>

<malware>
Ransomware requesting payment through Bitcoin
Highly Irregular
# Ransomware requesting payment through Bitcoin

(Asked by: username_0 on 2013-10-21)

I read [this article](http://www.stuff.co.nz/waikato-times/business/technology/9293900/Nasty-virus-holds-computer-to-ransom) recently, talking about the emergence of "ransomware". An excerpt is:

> The newer CryptoLocker differs by taking the ransom to a whole new level. Upon infection it doesn't make a fanfare, to the contrary, it acts in stealth performing a nefarious task in the background. You probably won't even notice the task running, as CryptoLocker silently encrypts your data files, including your precious family photos, vital Microsoft Word documents, spreadsheets, and email.
>
> Upon completing the encryption of your files, it sends the unique key required for decrypting and unlocking your files over the internet to a secure remote server, and then the ransom begins. Immediately the CryptoLocker window displays containing the image of a shield, instructional text, and a countdown timer.
>
> It's important to understand that the ransomware is not bluffing. Unless you pay the ransom, you will lose access to any files that have been encrypted. Once the countdown starts you have about three days to make payment, otherwise the key is destroyed and you permanently lose the ability to decrypt your files.

It seems like a logical step to request payment through Bitcoin, given that it would be much harder to track down the person receiving the payment than most other options. [Sure enough, it's been done already](http://arstechnica.com/security/2013/10/youre-infected-if-you-want-to-see-your-data-again-pay-us-300-in-bitcoins/)! Admittedly, it could be a pretty daunting task for your average Joe Bloggs to figure out how to safely pay within 3 days using Bitcoin, but obviously the time limit can be made flexible.

**Has any malware successfully used this technique yet, using Bitcoin? If so, does anyone know of a receiving address used more than once, thus giving an indication of how many people are paying a ransom?**

Are there any websites that have statistics on such incidents?

**Tags:** malware


---

## 1 answers

### Answer by username_1 on 2013-10-21. Score: 2

> Has any malware successfully used this technique yet, using Bitcoin?

I got around 10 people contacting me via localbitcoins in a day asking to buy exactly 2BTC to unlock their computers. I'd say it's pretty effective. I did get the addresses but don't seem to have it around now, when I looked around 30 people total had been paid out to two addresses.


---

