Federal Officials Recover Bitcoin Ransom From Colonial Pipeline Attack
Colonial paid $4.4 million in bitcoin after its systems fell victim to a ransomware attack last month.


Deputy Attorney General Lisa Monaco announced that federal officials had seized a bitcoin wallet that held proceeds from the Colonial Pipeline ransomware attack.(Chip Somodevilla/Getty Images)
Nikhilesh De
Jun 7, 2021 at 7:50 p.m.
Updated Jun 8, 2021 at 12:16 a.m.
Federal Officials Recover Bitcoin Ransom From Colonial Pipeline Attack

Federal officials have recovered $2.3 million in bitcoin (BTC, -8.99%) that Colonial Pipeline paid to a criminal outfit during a ransomware attack, the Department of Justice announced Monday.

Colonial Pipeline paid about $4.4 million in bitcoin to the attackers, linked to the Darkside ransomware group, after its payment systems were frozen last month. The company had to halt fuel transportation across the East Coast of the U.S., sparking fears of a gas shortage in a dozen states. Deputy Attorney General Lisa Monaco said Monday that the company contacted law enforcement, allowing federal agents to track and seize a bitcoin wallet.

“The Department of Justice has found and recovered the majority of the ransom paid,” Deputy Attorney General Lisa Monaco said in a press briefing.

An affidavit filed by an FBI agent provided further details. According to public court documents, the agent, whose name was redacted, tracked the bitcoin Colonial sent to Darkside across several transactions recorded on the bitcoin ledger, using a block explorer.

Subscribe to Money Reimagined, our newsletter on financial disruption.
Your email address
SUBSCRIBE
By signing up, you will receive emails about CoinDesk products and you agree to our terms & conditions and privacy policy.
About 63.7 BTC was sent to an address controlled by the FBI.

The bitcoin appears to come from the affiliate that deployed Darkside’s ransomware, not Darkside itself, said Tom Robinson, chief scientist at Elliptic. He told CoinDesk the funds appear to have been seized at 1:40 p.m. ET.


In a blog post, Robinson said 15% of the total payment went to Darkside itself.

“The private key for the Subject Address is in the possession of the FBI in the Northern District of California,” the affidavit said.

FBI Deputy Director Paul Abbate said federal officials had seized a bitcoin wallet that held the proceeds from the Colonial attack. It appears that the perpetrators still have about $2 million in crypto.

“Victim funds were seized from that wallet, preventing Darkside actors from using them,” he said.

The funds were seized as part of a ransomware task force created by the DOJ.

“The sophisticated use of technology to hold businesses and even whole cities hostage for profit is decidedly a 21st century challenge. But the old adage ‘follow the money’ still applies. And that’s exactly what we do,” Monaco said.

CNN first reported the news.


https://www.coindesk.com/federal-officials-recover-bitcoin-ransom-from-colonial-pipeline-attack

Huspuppi people be dis.

Lalasticlala.

Why the people no transfer am into another bitcoin wallet

DubaiLandLord:
Why the people no transfer am into another bitcoin wallet

I no shabi.

Russia get mind ooo, USA na baba toooo.

Chai those hackers na werey they are not real niggars but i believe they planning for another dreaded attack.