Cryptocurrency ransom demands popped up in recent cyberattacks

Monero is an appealing form of cryptocurrency for cyberattackers due to the privacy it affords.
 By 
Adam Rosenberg
 on 
Cryptocurrency ransom demands popped up in recent cyberattacks
Blockchain Technology, digital room with bits d-lock and text blockchain, 3d illustration Credit: Getty Images/Westend61

One of the most common, and irritating, cyberattacks -- the distributed-denial-of-service (or DDoS) -- now has the potential to come with a twist of cryptocurrency mining.

Security researchers with the internet services company Akamai have noticed something unusual as they've responded to a spate of recent DDoS attacks. Buried beneath the traffic deluge designed to grind a target's web traffic to a halt are ransom notes.

"It’s actually like a DDoS attack with a phishing attack with an extortion attack all rolled into one," said Chad Seaman, a senior engineer with Akamai's security intelligence response team, in an interview with Fortune. "When we saw it we were like, huh, clever bastards."

One note shared with Fortune, buried in an otherwise indecipherable string of code, makes a demand for "50 XMR," or Monero. As of March 3, 2018, that amount of Monero is worth roughly $18,000.

It's not uncommon for DDoS attacks to come with ransom demands of this sort, though normally such demands are relayed via email or some other means of communication after the attack has been launched. This is more of a "two birds, one stone" approach, linking the two together.

The reasoning is simple. As Akamai told Fortune, ransom notes sent via email often go unseen due to spam protections. Inserting the note into DDoS code ensures that the targets security analysts will see it as they investigate the attack data.

Monero is more attractive to cyberattackers than a cryptocurrency like Bitcoin because it's more difficult to trace. While both rely on public ledgers for recording and tracking transactions, Monero ledgers hide the sender, recipient, and amount of each transaction.

The inherent anonymity of Monero also means the attackers themselves don't necessarily know who's paid up or who hasn't. That fact alone should discourage any targeted interest from paying up.

Mashable Image
Adam Rosenberg

Adam Rosenberg is a Senior Games Reporter for Mashable, where he plays all the games. Every single one. From AAA blockbusters to indie darlings to mobile favorites and browser-based oddities, he consumes as much as he can, whenever he can.Adam brings more than a decade of experience working in the space to the Mashable Games team. He previously headed up all games coverage at Digital Trends, and prior to that was a long-time, full-time freelancer, writing for a diverse lineup of outlets that includes Rolling Stone, MTV, G4, Joystiq, IGN, Official Xbox Magazine, EGM, 1UP, UGO and others.Born and raised in the beautiful suburbs of New York, Adam has spent his life in and around the city. He's a New York University graduate with a double major in Journalism and Cinema Studios. He's also a certified audio engineer. Currently, Adam resides in Crown Heights with his dog and his partner's two cats. He's a lover of fine food, adorable animals, video games, all things geeky and shiny gadgets.

Mashable Potato

Recommended For You
'The Daily Show' on Trump's Greenland demands at Davos: "Just tell that man no"
The Daily Show host Josh Johnson presents a segment beside an image of Donald Trump.

Jimmy Kimmel slams Fox News for hypocritical response to recent Trump appearance
A man in a suit stands on a talk show stage. Text is visible at the bottom of the screen.

Is This The End of Hollywood's ‘Bad Moms’?
Recent representations of motherhood on film: (from left) Amy Adams in 'Nightbitch', Jennifer Lawrence in 'Die My Love', and Rose Byrne in 'If I Had Legs I'd Kick You'

Tesla sues Calif. DMV after agency called its 'autopilot' deceptive marketing
A row of Tesla EVs and a cybertruck in a sunny parking lot.

Bitcoin price plummets further. Is crypto crashing?
Bitcoin logo with falling stock prices

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

Google launches Gemma 4, a new open-source model: How to try it
Google Gemma

NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!