Future

2024

Reddit

Bitcoin

<p class="is-style-lead">Cyber gang BlackCat allegedly scammed its own affiliates as the group went dark shortly after it disrupted the U.S. healthcare system.</p> 
<p>An address associated with the <a href="https://crypto.news/tag/ransomware/" target="_blank" rel="noreferrer noopener">ransomware</a> gang BlackCat, also known as ALPHV and Noberus, received approximately $22 million worth of Bitcoin (<a href="https://crypto.news/price/bitcoin/" target="_blank" rel="noreferrer noopener">BTC</a>) on Mar. 1 following a late February attack on United Healthcare’s Change Healthcare, a tech firm providing services to hospitals and clinics.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/ALPHV?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">#ALPHV</a> scamming affiliates? $22M paid and withdrawn <a href="https://t.co/0ocKoXNLme" target="_blank">pic.twitter.com/0ocKoXNLme</a></p>— 𝕯𝖒𝖎𝖙𝖗𝖞 𝕾𝖒𝖎𝖑𝖞𝖆𝖓𝖊𝖙𝖘 (@ddd1ms) <a href="https://twitter.com/ddd1ms/status/1764639254016102410?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">March 4, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>However, a twist emerged two days later when the address received over 1,000 BTC and promptly emptied the wallet. Subsequently, an individual named “notchy,” claiming to be an affiliate of BlackCat, alleged in a post on a cybercriminal underground forum that the gang had deceived its affiliates as it didn’t pay them their share for executing the attack, according to a copy of the message shared on X by Dmitry Smilyanets, Recorded Future’s product management director.</p> 
<p> You might also like: <a href="https://crypto.news/reddit-hackers-want-4-5m-and-ethical-conduct-from-the-company/"> Reddit hackers want $4.5m and ethical conduct from the company </a> </p> 
<p>The affiliate further disclosed that the attack on Change Healthcare’s network had granted access to the data of numerous other healthcare firms partnered with the medical IT provider. In a statement to Wired, Smilyanets <a href="https://www.wired.com/story/alphv-change-healthcare-ransomware-payment/" target="_blank" rel="noreferrer noopener">confirmed</a> that the affiliates “still have this data, and they’re mad they didn’t receive this money.”</p> 
<p>Both Recorded Future and TRM Labs, a blockchain analysis firm, have <a href="https://www.wired.com/story/alphv-change-healthcare-ransomware-payment/" target="_blank" rel="noopener">reportedly</a> identified the Bitcoin address that received nearly $100 million in Bitcoin as linked to the BlackCat hackers. According to MistTrack, all the BTC allegedly connected to illicit activity has been transferred to eight different addresses and remains unspent thus far.</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
   https://twitter.com/MistTrack_io/status/1765336371303272809 
 </div>
</figure> 
<p>Established in late 2021, BlackCat operated on a ransomware-as-a-service model, providing affiliates with malware and taking a percentage of ransom payments. Having targeted numerous companies worldwide, including Reddit in 2023, the gang’s website <a href="https://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant" target="_blank" rel="noreferrer noopener">was shut down</a> by the FBI in December 2023, resulting in the seizure of multiple websites and the release of a decryption tool.</p> 
<p>However, in February 2024, the U.S. Department of State <a href="http://www.state.gov/u-s-department-of-state-announces-reward-offers-for-criminal-associates-of-the-alphv-blackcat-ransomware-variant/" target="_blank" rel="noreferrer noopener">annoucned</a> a reward offering of up to $10 million for information leading to the identification or location of individuals holding key leadership positions within the BlackCat group and up to $5 million for information leading to the arrest or conviction of anyone involved in the group.</p> 
<p> Read more: <a href="https://crypto.news/australias-ndis-faces-fallout-from-crypto-ransomware-attack-on-hwl-ebsworth/"> Australia’s NDIS faces fallout from crypto-ransomware attack on HWL Ebsworth </a> </p>

Ransomware gang BlackCat exit scams affiliates with millions in Bitcoin after attacking medical IT firm

crypto.news

Other articles published on Mar 7, 2024

Dynex (DNX) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030

SAP Sees Cloud Revenue Growth Hinging on AI Adoption

Fiat Woes and Inflation Cause Bitcoin Price to Skyrocket in These Nations

Bitcoin Maintains Market Cap Above $1 Trillion, VeChain Consolidates Bullish Trend as KangaMoon R...

Significant Adoption and Distribution Growth for XRP Cryptocurrency

Anticipated Shiba Inu Wait Comes to An End! What’s New?

Join our free newsletter for daily crypto updates!