Ransomware gangs often switch ransomware-as-a-service suppliers to improve profits, according to a recent report by Chainalysis. Bitcoin ransoms paid by victims are often divided among different parties and laundered to hide the money from law enforcement.
More from Chainalysis:
- The analysis was able to find connections between four prominent ransomware gangs: Maze, Egregor, SunCrypt, and Doppelpaymer.
- The researchers analyzed the links between Bitcoin transactions to uncover the ties among these groups.
- They also found that Maze and Egregor operations used the same money-laundering service and over-the-counter brokers to convert Bitcoin into cash, supporting the theory that Egregor is a rebrand of the defunct Maze gang.