NSA Malware Buyers

As of August 24th there have been 64 transfers of money to the $500,000,000 ransom demand for the allegedly leaked NSA Malware. We list them all here.

Total donated so far: 1.76149345 BTC (~$1,000)

The largest donation is for approx $800. It was sent from China and the transaction is apparantly chosen to have the word ‘nice‘ in it. A group of transactions for 0.001337 were sent from a troll who chose vanity wallet addresses that spell out a Rick Roll:

1never9kNNkr27UseZSHnaEHg1z8v3Mbb
1gonnaV3MFNjymS4RGvUbHACstiS8aSYz
1giveGEk184Gwep2KT4UBPTcE9oqWzCVR
1youKBMLEohsexdZtkvnTzHnc4iU7Ffty
1upAbpBEWQ467QNT7i4vBMVPzSfQ3sqoQ

The same person also made two tiny payments on 22nd of August on the ‘never-never’:

1neverzX8S5YiMGCCZC3Nrbn5tqcY5EX7
1never9kNNkr27UseZSHnaEHg1z8v3Mbb

Only one wallet matches the “rick roll” payments, but it can be assumed to be the same person.

ransom note

The language used in the ransom demand also appeals to us. Whoever wrote it could have got a job as a script-writer. What means, send bitcoin?

Payments Received

date	description	moneyIn
22/08/2016 00:21	PAYMENT RECEIVED	0.0001
22/08/2016 00:17	PAYMENT RECEIVED	0.00001
21/08/2016 22:59	PAYMENT RECEIVED	0.0099999
21/08/2016 02:06	PAYMENT RECEIVED	0.00004097
21/08/2016 02:06	PAYMENT RECEIVED	0.00099639
21/08/2016 02:06	PAYMENT RECEIVED	0.00076236
21/08/2016 02:05	PAYMENT RECEIVED	0.0010101
20/08/2016 23:46	PAYMENT RECEIVED	0.0011119
20/08/2016 23:46	PAYMENT RECEIVED	0.0011113
20/08/2016 23:46	PAYMENT RECEIVED	0.0011112
20/08/2016 23:46	PAYMENT RECEIVED	0.0011111
20/08/2016 23:46	PAYMENT RECEIVED	0.0010101
20/08/2016 23:46	PAYMENT RECEIVED	0.00040307
20/08/2016 23:46	PAYMENT RECEIVED	0.00079475
20/08/2016 23:46	PAYMENT RECEIVED	0.00040541
20/08/2016 23:46	PAYMENT RECEIVED	0.00014114
20/08/2016 23:46	PAYMENT RECEIVED	0.00040307
20/08/2016 23:35	PAYMENT RECEIVED	0.00061176
20/08/2016 23:35	PAYMENT RECEIVED	0.00015545
20/08/2016 23:35	PAYMENT RECEIVED	0.00019205
20/08/2016 23:35	PAYMENT RECEIVED	0.00085154
20/08/2016 23:35	PAYMENT RECEIVED	0.00087661
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
19/08/2016 22:49	PAYMENT RECEIVED	0.0010101
17/08/2016 18:57	PAYMENT RECEIVED	0.08066178
17/08/2016 18:14	PAYMENT RECEIVED	0.001337
17/08/2016 18:14	PAYMENT RECEIVED	0.001337
17/08/2016 18:14	PAYMENT RECEIVED	0.001337
17/08/2016 18:14	PAYMENT RECEIVED	0.001337
17/08/2016 18:13	PAYMENT RECEIVED	0.001337
17/08/2016 18:13	PAYMENT RECEIVED	0.001337
17/08/2016 18:12	PAYMENT RECEIVED	0.001337
17/08/2016 18:12	PAYMENT RECEIVED	0.001337
17/08/2016 18:12	PAYMENT RECEIVED	0.001337
17/08/2016 18:12	PAYMENT RECEIVED	0.001337
16/08/2016 18:33	PAYMENT RECEIVED	0.00096933
16/08/2016 18:10	PAYMENT RECEIVED	0.001
16/08/2016 14:42	PAYMENT RECEIVED	0.001
16/08/2016 14:42	PAYMENT RECEIVED	0.001
16/08/2016 14:42	PAYMENT RECEIVED	0.001
16/08/2016 14:42	PAYMENT RECEIVED	0.001
16/08/2016 14:28	PAYMENT RECEIVED	0.001
16/08/2016 14:23	PAYMENT RECEIVED	0.001
16/08/2016 14:14	PAYMENT RECEIVED	0.001
16/08/2016 12:06	PAYMENT RECEIVED	1.5
15/08/2016 23:31	PAYMENT RECEIVED	0.04
15/08/2016 21:54	PAYMENT RECEIVED	0.0003
15/08/2016 19:28	PAYMENT RECEIVED	0.03733067
15/08/2016 16:02	PAYMENT RECEIVED	0.0355
15/08/2016 15:46	PAYMENT RECEIVED	0.0069

Up-to-date list can be seen here.

Credits
Ransom Letters generated at ransomizer.com.

This entry was posted in Bitcoin and tagged , , . Bookmark the permalink.