Don't Blame Bitcoin for Ransomware
  What you need to know today in crypto and beyond July 13, 2021 Sponsored By:  Welcome to The Node.
If you were forwarded this newsletter and would like to receive it, sign up here.
Questions? Feedback? We'd love to hear from you! Simply reply to this email.
–Daniel Kuhn
Today's must-reads Top Shelf  MINING MIGRATION: BIT Mining, a Chinese bitcoin miner listed on the New York Stock Exchange, raised $50 million to build new overseas data centers following the Chinese crackdown on the industry. The company has started to relocate machines in Kazakhstan. Meanwhile, Nasdaq-listed, Shanghai-based The9 looks set to rent space from Russia's BitRiver. Finally, it's not just the Chinese mining industry that's changing, as Quebecois crypto miner Bitfarms looks to expand beyond the Canadian province. BINANCE BLOCKED: One of Binance's payment partners in Europe, Clear Junction, has suspended facilitating payments to the crypto exchange. The decision was taken in response to Financial Conduct Authority's decision that Binance is not permitted to undertake any regulated activity in the U.K. INTERLINKED? The Bank of England (BOE) is worried about potential crypto "spillovers" disrupting mainstream financial markets. According to its bi-annual Financial Stability Report, published Tuesday, U.K. central bankers said crypto's growing popularity and "interlinkages between volatile cryptoassets and other systemic financial markets and institutions" is cause for alarm. MARKET MEMO: Cryptocurrency derivatives, such as futures and options, have surpassed the number of coins traded in spot markets in June, the first time this year, according to CryptoCompare. Both derivative and spot trading have declined, following bitcoin's price pop. Meanwhile, a Goldman Sachs memo said Coinbase's stock (COIN) is a "tactical trade." Finally, Jeff Wilser covers the Lightning Network: It will change everything about Bitcoin. –D.K.
A message from Nexo  Your digital assets deserve a savings account in their BEST INTEREST. Leading crypto lender Nexo treats you, your crypto and your fiat to industry-best Crypto & Fiat services, featuring:
* Up to 12% interest on digital assets, paid out daily! * Yields available on BTC, ETH, LTC, BCH, XRP, XLM, EOS, TRX, LINK, BNB, PAXG, USDT, USDC, TUSD, PAX, DAI, HUSD, GBP and EUR. * No minimum or maximum limits on funds deposited, offering infinite opportunities to earn. * #ZeroFees on all transactions. * Military-grade wallet security and top-tier insurance on all custodial assets with SOC 2 Type 2 certified crypto custodian BitGo.
Get started at nexo.io
A message from CoinDesk  The Investor's Perspective on the Bitcoin Taproot Upgrade Taproot is a bundle of three upgrades to Bitcoin aimed at improving network security, privacy and scalability. At the same time, it poses some potential drawbacks to Bitcoin including risks of low adoption, unintended privacy shortcomings and Bitcoin community disappointment and fracturing.
CoinDesk Research's newest report dives into the economic impact and investment implications of the Taproot upgrade. Download the full report.
What others are writing... Off-Chain Signals 
–Ben Schiller
RIP: The 60/40 portfolio. How do billionaires and hedge funds invest outside the market without touching scam coins or meme stocks? They stash millions into an overlooked asset class that's projected to grow by over $1 trillion by 2026: blue-chip art. Contemporary art prices rose 14% per year from 1995-2020. Unlock this investment with this private Node link.*
*This is sponsored advertising content. See important disclosure from Sponsor here.
Putting the news in perspective The Takeaway  Don't Blame Bitcoin for Ransomware Amid the growing geopolitical threat of ransomware, crypto has become a stalking horse. Following a slew of high-profile exploits, there have been calls to ban or surveil blockchain networks, with the thinking that bitcoin catalyzes cybercrime. The risks of ransomware are real: Any organization that relies on computers may be vulnerable to digital extortion. The threat isn't always clear: Malware can be developed or deployed by individuals, state-backed groups or hacking collectives. And the price is high: Computer hijackings can disrupt critical infrastructure from the electricity grids to watersheds, endangering lives and economies.
Considering the amorphous threat that ransomware presents, crypto seems like a vector for concrete action. After all, the Colonial Pipeline hackers were paid in BTC. So was REvil, a group that once attacked Apple, which was paid $70 million in bitcoin for its recent Kaseya exploit. A new crowdfunding site, Ransomwhe.re, looks to track bitcoin payments to wallets associated with ransomware gangs. But blaming crypto for the rise in ransomware is a mistake, said Marcus Hutchins, a British computer security researcher with a storied career in the malware industry. In a video titled "Why Destroying Bitcoin Wouldn't Stop Ransomware," Hutchins notes that hackers will find a way, with or without bitcoin.
"Cryptocurrency has certainly made ransomware more accessible and contributed to its proliferation, but without it these kinds of attacks would have persisted," he told CoinDesk. When the malware industry first emerged in 2012, it was the norm to accept U.S. dollars for exploits.
While the recent trend of corporate hacks has primarily been funded through crypto – Chainalysis found crypto payments to ransomware spiked to $412 million last year – that's not reason enough to take action against a nascent industry.
"We have absolutely no data on what corporate ransomware attacks might look like without cryptocurrency. We can only theorize based on past techniques, but not future innovations. Therefore, advocating banning cryptocurrency to stop ransomware is naive at best," he tweeted. Hutchins is renowned in the hacker community for stopping WannaCry in 2017, at the time the largest ransomware attack, which infected hundreds of thousands of computers worldwide and shut down over a dozen U.K. hospitals. He's also the architect of darknet sites, botnets and malware scripts. As a teenager, Hutchins began spending time on web forums, where he fell into ghostwriting malicious code. It paid well, in recreational drugs and bitcoin. One script would eventually land him in U.S. custody, in a story told in full by Wired.
Since reformed, Hutchins has worked to reverse engineer malware and provide security advice. He also started a popular blog called Malware Tech. Having watched the ransomware industry evolve over the past decade, Hutchins says emphatically that the recent rise in ransomware cannot be pinned on crypto.
CoinDesk caught up with him to hear more.
Cryptocurrency has certainly made ransomware more accessible and contributed to its proliferation, but without it these kinds of attacks would have persisted. The sophisticated cyber-crime groups have access to money laundering networks, so are capable of working with USD. It's impossible to estimate how much ransomware there'd be without cryptocurrency, because today's corporate targeted ransomware only came about around 2016, when cryptocurrency was already the norm for payments.
Some have said bitcoin is a horrible currency to use for criminal operations as every transaction is recorded. What happened after the Colonial Pipeline hack is case in point. What do you think?
Typically bitcoin is preferred, as it can facilitate fast, frictionless, automated payment validation infrastructure. But, due to its traceable nature, many gangs opt to cash out the bitcoin and launder in USD instead.
You've noted that ransomware uses the banking system, money transmitters like Western Union, alternatives like Liberty Reserve and crypto. Considering the scope and history of cybercrime, is the only potential solution to ransomware more surveillance of all financial systems?
No. This is not a solution at all, only a partial mitigation. While gangs are capable of operating with impunity from non-extradition countries, it doesn't matter how easily they can be tracked down if they cannot be arrested or stopped.
The way hackers are written about sometimes paints ransomware as a professionalizing industry. Does this square with your experience?
What would you generally recommend to a company or government that has been infected?
It's important to undergo an external IR to investigate the full scale and scope of the attack.
NTT, a Japanese tech services provider, found that cryptojackers made up 41% of all detected malware in 2020. What do you make of this trend? Is this cause for legitimate concern? Is it just a matter of rising crypto prices?
Cryptojacking is one of the ways to monetize device access with the lowest barrier to entry; as a result, it's accessible to even the lowest skilled hackers, thus very widespread. Due to the non-destructive nature of cryptojacking I believe it's something to be addressed, but not a high priority threat like ransomware.
–D.K.
CORRECTION: Yesterday's newsletter misstated the name of Hiro's product lead. He is Mark Hendrickson, not Matthew.
 The cryptocurrency movement has never been so sprawling, reaching every corner of the planet.
Crypto State by CoinDesk aims to connect with local communities to explore this movement of financial disruption and how it trickles down to every corner of the globe, from DeFi investment opportunities to alternative ways to transact and store wealth.
We're making virtual stops with audiences in Nigeria, the Middle East and Southeast Asia this year. Register for the Crypto State virtual tour.
The Chaser... 
ATTENTION: Scammers have been sending fraudulent emails with links to sites disguised to look like coindesk.com. If you are in doubt about a link, type https://www.coindesk.com directly into your browser; do not copy and paste. Remember, if something seems too good to be true, it probably is.
Copyright © 2021 CoinDesk, All rights reserved.
250 Park Avenue South New York, NY 10003, USA You can manage your preferences here or unsubscribe from all CoinDesk email. |
