WannaCry’s ransom funds have become Monero via ShapeShift as the Bitcoin exchange works with police to trace details.
ShapeShift is cooperating with police after it emerged that the WannaCry attackers used it to convert Bitcoin to Monero.
As multiple sources report, the fairly modest sums the hackers gained from the international cyberattack have made their way through ShapeShift for the equivalent in Monero (XMR). The altcoin is regarded by some to offer more anonymity than other cryptocurrencies.
“As of today, we have taken measures to blacklist all addresses associated with the WannaCry attackers that are known to the ShapeShift team, as is our policy for any transactions we deem breach our terms of service,” a statement from the exchange reads Thursday.
Statement confirms WannaCry attackers used ShapeShift.io to convert bitcoins to Monero. They are assisting police. https://t.co/NGDMUo7lCt pic.twitter.com/fP8UCcoS5H
— Patrick O’Neill (@HowellONeill) August 3, 2017
“We are closely watching the situation as it continues to unfold as to block any further addresses associated.”
North Korea involved?
The details behind WannaCry are still hazy, with the latest suspicions falling on state-sponsored actors working on behalf of the North Korean government. Previous investigations suggested the perpetrators had Chinese as their first language.
“Any transactions made through ShapeShift can not be hidden or obscured and are thus 100 percent transparent, making laundering of any digital tokens impossible,” ShapeShift continued about the trade itself.
Despite the widespread havoc wrought by the attack, only a relatively small amount of Bitcoin was sent as ransom money, and the progress of the funds is being keenly tracked by the community.
Transaction mapping tool BlockSeer released a physical representation of how the coins moved through ShapeShift, which it published on Twitter in light of the trade.
Wanna Cry ransomware money laundering with Bitcoins in action. Graph shows Bitcoin being converted to Monero (XMR) via @ShapeShift_io pic.twitter.com/7NsdkOOYuT
— BlockSeer (@BlockSeer) August 4, 2017
