The malicious software locks down victims’ computers and refuses to grant them access to their files unless they agree to pay at least $300 in bitcoin. Which may have you wondering: What is bitcoin? And why do the attackers want payment in that currency?
Here’s a refresher on bitcoin and how it’s connected to the ongoing security issue.
Q: What is bitcoin?
A: Bitcoin is a kind of digital currency. You can buy it with dollars and euros, just like you can trade any other currency. You store it in an online “wallet.” And with that wallet, you can spend bitcoin online and in the physical world for goods and services. Even PayPal supports bitcoin.And, of course, bitcoin has a valuation, which you may have heard about because bitcoin’s price has fluctuated up and down.
Q: What’s different about bitcoin?
A: Usually if you pay for something on the Internet, you use a credit or debit card. That card is connected to information about you, such as your name and billing address.
You can use bitcoin the same way, but unlike a credit card, the transactions you make using the currency are completely anonymous. They can’t be used to identify you personally. Instead, whenever you trade in bitcoin, you use a so-called private key associated with your wallet to generate a bit of code – called an address – that is then publicly associated with your transaction but with no personal identifying information. And in that way, every transaction is recorded and securely signed in an open ledger that anyone can read and double-check.
Q: So you can use bitcoin to protect your privacy. Is that why the WannaCry attackers picked bitcoin as a form of payment?
A: Possibly. Bitcoin has certainly gained prominence in the press as a technology that can facilitate crime. But just because the identities of people in a bitcoin transaction may be hidden, the public ledger has increasingly helped law enforcement trace the movement of bitcoins from place to place.
The Justice Department has successfully prosecuted online criminal operations that used bitcoin. In 2013, the U.S. government arrested Ross Ulbricht, the founder of a major underground drug market, and seized more than $3.5 million worth of bitcoin. Two undercover FBI agents associated with the investigation were later accused of stealing some of that currency.
Q: Could law enforcement wind up doing something similar with WannaCry?
A: The government is already investigating. On Monday, Homeland Security Adviser Tom Bossert told reporters that “attribution” — the process of figuring out who was responsible for the crime — is generally pretty tough to do with computer attacks. Often, the attackers are located beyond the reach of U.S. law enforcement or have shrouded their activities behind multiple layers of security. But, said Bossert, “I don’t want to say that we have no clues.”
Post Your Comments