Skip to main content

FBI: Over $140 million paid out to ransomware attackers

(Image credit: Image source: Shutterstock/Nicescene)

According to a report from the FBI, businesses have paid more than $140 million in bitcoin to ransomware attackers since 2013.

Published during the RSA security conference, this figure does not include operational costs, or additional costs in the attack's aftermath, accounting only for ransom fees paid.

The report also revealed which ransomware families (opens in new tab) generated the most money for cybercriminals. The Ryuk ransomware outperformed other families by quite a margin, making a total of $61.26 million. Crysis and Dharma were second with $24.48 million, while Bitpaymer was used to extort victims for $8.04 million.

The FBI gathered this intelligence by tracking activity on a group of cryptocurrency wallets identified as owned by cybercriminals (though the anonymous wallet does not reveal the identity of the owner).

To receive ransom pay offs, attackers must share their unique wallet address. This makes it relatively easy for the FBI to calculate just how much money criminals have extorted over the past six years.

The FBI also said there are probably “many other” wallets that weren’t included in the report, especially considering only one cryptocurrency (Bitcoin) was tracked, so the overall figure is likely even greater.

Sead Fadilpašić is a freelance tech writer and journalist with more than 17 years experience writing technology-focussed news, blogs, whitepapers, reviews, and ebooks. And his work has featured in online media outlets from all over the world, including Al Jazeera Balkans (where he was a Multimedia Journalist), Crypto News, TechRadar Pro, and IT Pro Portal, where he has written news and features for over five years. Sead's experience also includes writing for inbound marketing, where he creates technology-based content for clients from London to Singapore. Sead is a HubSpot-certified content creator.