We all remember the devastating WannaCry ransomware attack that struck organizations around the world in May 2017. The attack spread at a rate of almost 3,600 computers per hour, or about one per second. When all was said and done, the ransomware infected more than 300,000 devices.

Many victims simply paid the ransom to retrieve their locked files. This only encourages the threat actors and does not guarantee safe return of the stolen data. A better strategy is to avoid attacks such as WannaCry in the first place by applying patches and keeping all software and operating systems up to date. Of course, security leaders should also implore users to create strong and complex passwords, use multifactor authentication, back up critical data and avoid clicking suspicious links received via email, SMS or social media.

These security best practices can help limit the threat of ransomware, but what if there were a one-stop solution that could enable analysts to discover the root cause of an attack?

The Bitcoin Buck Stops Here

The key is bitcoin. Most ransomware operators demand payment in the digital currency. WannaCry, for example, collected more than $93,000 worth of bitcoin. Due to the anonymous nature of bitcoin, transactions are largely outside the jurisdiction of security teams and law enforcement agencies.

There is another side of the proverbial coin, however. Bitcoin conversions are processed on a decentralized register called a blockchain, which is transparent and traceable. Since all operations performed and records stored are visible to everyone, security analysts can use blockchain technology to track bitcoin transactions back to the root cause and threat actors behind a ransomware attack.

Blockchain also creates hurdles for cybercriminals. To use extorted bitcoins, fraudsters must transfer them to a third-party address, possibly a bitcoin register or wallet, where service providers process a flat currency exchange. These suppliers can identify bitcoin addresses associated with ransomware campaigns and quickly notify cybersecurity specialists.

Blockchain Is Worth the Investment

Of course, cybercriminals will likely develop programs to make it harder for analysts to trace bitcoin transactions, but increased investment in blockchain technology can help organizations stay one step ahead.

In the event of a widespread ransomware attack such as WannaCry, the financial burden of tracing the blockchain is inversely proportional to the damage inflicted upon individual victims and affected organizations. So what are you waiting for? Start using the transparency of blockchain technology to identify ransomware threats today.

Watch the IBM Think Academy video to learn more about blockchain

More from Fraud Protection

Kronos Malware Reemerges with Increased Functionality

The Evolution of Kronos Malware The Kronos malware is believed to have originated from the leaked source code of the Zeus malware, which was sold on the Russian underground in 2011. Kronos continued to evolve and a new variant of Kronos emerged in 2014 and was reportedly sold on the darknet for approximately $7,000. Kronos is typically used to download other malware and has historically been used by threat actors to deliver different types of malware to victims. After remaining…

How Security Teams Combat Disinformation and Misinformation

“A lie can travel halfway around the world while the truth is still putting on its shoes.” That popular quote is often attributed to Mark Twain. But since we're talking about misinformation and disinformation, you’ll be unsurprised to learn Twain never said that at all. In fact, no one knows who first strung those words together, but the idea that truth spreads slowly while lies spread quickly is at least several hundred years old. The “Twain” quote also serves to…

A View Into Web(View) Attacks in Android

James Kilner contributed to the technical editing of this blog. Nethanella Messer, Segev Fogel, Or Ben Nun and Liran Tiebloom contributed to the blog. Although in the PC realm it is common to see financial malware used in web attacks to commit fraud, in Android-based financial malware this is a new trend. Traditionally, financial malware in Android uses overlay techniques to steal victims’ credentials. In 2022, IBM Security Trusteer researchers discovered a new trend in financial mobile malware that targets…

New DOJ Team Focuses on Ransomware and Cryptocurrency Crime

While no security officer would rely on this alone, it’s good to know the U.S. Department of Justice is increasing efforts to fight cyber crime. According to a recent address in Munich by Deputy Attorney General Lisa Monaco, new efforts will focus on ransomware and cryptocurrency incidents. This makes sense since the X-Force Threat Intelligence Index 2022 named ransomware as the top attack type in 2021. What exactly is the DOJ doing to improve policing of cryptocurrency and other cyber…