America

Winston

Bitcoin

ZachXBT

Change

On-chain sleuth ZachXBT has revealed that CDK Global paid hackers about $25 million worth of Bitcoin to resolve a major cyberattack a few weeks ago. The software provider for car dealerships in North America suffered a major cyber breach a few weeks ago that affected more than 15,000 car dealerships in the US. 
Also Read: <a href="https://www.cryptopolitan.com/turkish-exchange-btcturk-hit-by-cyberattack/">Turkish exchange BtcTurk hit by a cyberattack</a> 
However, it announced later that its service is fully back online. Although the company did not disclose how it fixed the issue, on-chain data has now shown that it opted to pay the ransom. 
<h3 id="over-387-bitcoin-were-transferred-to-blacksuit">Over 387 Bitcoin were transferred to BlackSuit</h3> 
According to <a href="https://blockchair.com/bitcoin/address/bc1q0c03s0c80uuxjq4jcyfhs4k8w5wu6ca9xhxsw9" rel="nofollow noopener" target="_blank">on-chain</a> data shared by ZachXBT, CDK Global transferred 387.367 BTC worth approximately $25 million to bc1q0c on June 21. This address is reportedly controlled by hackers affiliated with the notorious ransomware group BlackSuit. Following the transfer, the hackers moved the funds to centralized exchanges. 
Other on-chain intelligence analysts also back up these claims. CNN reported that blockchain intelligence platform TRM Labs also confirmed the transaction. Interestingly, CDK did not send the funds directly to the attackers. Instead, it used the services of a firm that specializes in dealing with ransomware demands. 
Meanwhile, there are speculations over why CDK waited a whole week after making the payments before restarting its service, especially given that it paid off the attackers quickly. The company likely wanted to boost its security systems and tidy up loose ends before resuming operations. 
However, CDK has not issued any public statement to confirm the payment, but an earlier <a href="https://www.bloomberg.com/news/articles/2024-06-21/cdk-hackers-want-millions-in-ransom-to-end-car-dealership-outage" rel="nofollow noopener" target="_blank">report</a> suggested that it is considering meeting the attacker’s multimillion-dollar demand. Still, the amount paid as ransom appears to be a fraction of the financial impact of the incident. 
<h3 id="is-crypto-related-ransomware-making-a-comeback">Is crypto-related ransomware making a comeback?</h3> 
Ransomware attackers demanding payments in cryptocurrencies are not new, but this incident marks the biggest incident for these bad actors in 2024. The last major ransomware payment was in March when Change Healthcare paid 350 BTC worth $22 million to the BlackCat or AlphV ransomware group. 
Before then, crypto payments related to ransomware peaked at <a href="https://www.chainalysis.com/blog/ransomware-2024/" rel="nofollow noopener" target="_blank">$1.1 billion in 2023</a>, with victims ranging from major corporations such as Shell and British Airways to schools and hospitals. With the attackers deploying various approaches, several law enforcement agencies, including the FBI, have declared war on ransomware criminals. 
Security expert Winston Ighodaro <a href="https://x.com/Officialwhyte22/status/1809804804278964418" rel="nofollow" target="_blank">commented</a>: 
<blockquote>
 “Backing up your data offline and using a good antivirus software helps prevent ransomware attacks most time but that doesn’t help frequently as attackers often threaten to upload victims confidential data unto the dark web either for sale or for anyone who cares.”
</blockquote> 
<figure id="attachment_555204" aria-describedby="caption-attachment-555204" style="width: 100%" class="wp-caption aligncenter">
 <img loading="lazy" decoding="async" class="size-full wp-image-555204" src="https://www.cryptopolitan.com/wp-content/uploads/2024/07/Screenshot-2024-07-14-170416.png" alt="Bitcoin ransom payments" width="1045" height="586" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/07/Screenshot-2024-07-14-170416.png 1045w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/Screenshot-2024-07-14-170416-300x168.png 300w, https://www.cryptopolitan.com/wp-content/uploads/2024/07/Screenshot-2024-07-14-170416-768x431.png 768w" sizes="(max-width: 1045px) 100vw, 1045px">
 <figcaption id="caption-attachment-555204" class="wp-caption-text">
 Bitcoin ransom payments (Source: Chainalysis)
 </figcaption>
</figure> 
Incidents such as the recent attack on CDK Global show that the bad actors remain active, and cryptocurrencies are still one of their preferred means of payment. However, the public nature of blockchain networks means that it is easy to track their financial networks, which has helped law enforcement in the effort to bring down these bad actors.

CDK $25 million Bitcoin ransom linked to BlackSuit’s attack

Table of Contents

Cryptopolitan_News

Other articles published on Jul 14, 2024

Did AT&T Pay $400,000 In Bitcoin To Data Hackers?

HBAR, FIL, CRO, and RBLK: Which Crypto Is Better Positioned For The Upcoming Bull Market?

New Solana Memecoin Trump the Felon Surges Over 13,000%, Will Rally Another 18,000% Before First ...

Trump’s presidential odds soar to all-time high on Polymarket following assassination attempt

Bitcoin & Altcoins In Focus As Market Eyes Ether ETF, Fed Chair Comment, & Other Events

Pro-Crypto Trump Assassination Attempts Rallies Defiant Investors As CLANDENO (CLD) Predicted to ...

Join our free newsletter for daily crypto updates!