Monero crypto of choice as ransomware ‘double extortion’ attacks increase 500%

cointelegraph.com:

A new report by blockchain analytics firm CipherTrace highlights the growing role that privacy-focused cryptocurrencies such as Monero are playing in the rising tide of ransomware.

“Current Trends in Ransomware” delves into trends observed during 2021 but was only released this week. The firm revealed there was almost a 500% increase in “double extortion” ransomware attacks from 2020 to 2021. These are cyber attacks in which malicious actors steal a victim’s sensitive data in addition to encrypting it.

The report echoes similar findings from analytics firm Chainalysis which reported that overall ransomware crypto payments topped $600 million for the period.

The new research found that last year saw increasing demands for ransom payment in Monero (XMR), with attackers adding premiums for payments made in Bitcoin (BTC) ranging from 10 to 20%. At least 22 ransomware strains (from an incomplete list of more than 50) only accept XMR payments, and at least seven of them accept both BTC and XMR, it added.

The report cited a Russian-speaking ransomware gang called Everest Group which claimed to have hacked the U.S. Government in October last year. According to CipherTrace, Everest Ransomware is “currently trying to sell the data for $500,000 in XMR.”

Another example was the Russian DarkSide group responsible for the U.S. Colonial Pipeline attack in May 2021. The ransom could be paid in either XMR or BTC, but the cost was higher for the latter.

The REvil ransomware group also switched from demanding BTC to demanding payments in XMR only in early 2020.

Related:Don’t blame crypto for ransomware

Monero is a privacy-based cryptocurrency that uses a combination of technologies such as mixers, ring signatures, and stealth addresses that