NotPetya attackers empty Bitcoin wallet and issue new ransom demand

The attackers behind the NotPetya ransomware have emptied the Bitcoin wallet used to collect payments, and issued a new ransom demand.

Motherboard reported that someone has moved tokens worth over $10,000 from the Bitcoin wallet.

They also sent two smaller payments of 0.01 BTC each to Pastebin and DeepPaste. At just under $30, it is the price of a Pastebin Lifetime Pro account.

Posts then appeared on Pastebin and DeepPaste claiming to offer decryption of any hard drive hit by the NotPetya ransomware, excluding boot disks.

The hacker set the price at 100 Bitcoin – almost $260,000.

The BBC quoted experts who said the move appears to be a smokescreen to create a false trail for investigators to follow.

There is currently no reason to think it is possible to recover files encrypted by NotPetya, and its intention from the beginning was to destroy data – not ransom it.

NotPetya DeepPaste

Petya

Now read: NotPetya is very different and much worse than WannaCry

Latest news

Partner Content

Show comments

Recommended

Share this article
NotPetya attackers empty Bitcoin wallet and issue new ransom demand