Monero Usage in Ransomware Payments Rises while Bitcoin Accepted With Premium

Adoption Bitcoin Crime Monero
Last updated:
Author
Author
Ruholamin Haqshanas
About Author

Ruholamin Haqshanas is a contributing crypto writer for CryptoNews. He is a crypto and finance journalist with over four years of experience. Ruholamin has been featured in several high-profile crypto...

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Source: Adobe/Shutter2U

 

Ransomware attackers are increasingly asking for payments in privacy coins like monero (XMR), while still mostly accepting bitcoin (BTC) payments but with a premium, per a new report.

According to the report by CipherTrace, a crypto intelligence company, demanding ransomware payments in XMR has been a trend among attackers in 2021. 

“Most of the groups and strains listed as using XMR are relatively new,” the report said. “CipherTrace analysts have observed a trend of increasing use of XMR by darknet markets and ransomware actors.”

In total, CipherTrace data revealed that at least 22 ransomware groups, not all of which are currently active, accept only XMR, while another seven accept both BTC and XMR. In total, the analysts found over 50 groups and strains that use XMR, but the list of those using BTC is well over 1,000. 

However, with reported ransomware payments totaling USD 590m in the first half of 2021, ransomware payments where the attackers demanded either BTC or XMR made up just 5.7% (USD 34m) of all transactions, per the report. Meanwhile, payments where attackers demanded only XMR made up just 0.4% (USD 2.4m) of all reported ransomware-related transactions at this time. 

Also, while some attackers only accept XMR, others also accept BTC but charge an additional fee, which is arguably to cover the expenses of making easily traceable BTC transactions anonymous. 

For instance, cybercriminal hacking group DarkSide, which is probably best known for attacking Colonial Pipeline, accepts payments in both BTC and XMR but charges 10% – 20% more for payments in BTC.

Likewise, BlackMatter Ransomware group, a new ransomware group that reportedly has ties to DarkSide, has the same pattern of accepting payments in both BTC and XMR, with BTC ransom payments being 25% more expensive.

However, some criminal groups, like REvil, which attacked business software-maker Kaseya in mid-2021, have been accepting only XMR payments, but would also add a BTC option with a premium. 

Monero is a privacy-oriented cryptocurrency that uses obfuscated ledger, which ensures that any user can send and broadcast transactions but an outside observer cannot discern the amount, source, or destination of transactions.
____
Learn more: 
CIA Running a ‘Number of’ Active Crypto Projects, Director Claims
T-Mobile ‘Hackers Want BTC 6’ for Data, US Offers Dark Web USD 10M in Crypto

Holding The World To Ransom: Top 5 Online Gangs
Inside A Ransomware Attack: How Dark Webs of Cybercriminals Collaborate

More Articles

News
World of Women and Artist Sara Baumann Launch Free NFT Portrait Series
Tanzeel Akhtar
Tanzeel Akhtar
2025-02-18 23:43:46
Blockchain News
Tether Co-Founder Supports New Stablecoin Project on Ethereum and Solana
Hassan Shittu
Hassan Shittu
2025-02-18 23:32:13
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors