Blog Dark Reading Threat Dashboard Series | Tracking Bitcoin Wallets as IOCs for Ransomware

Dark Reading Threat Dashboard Series | Tracking Bitcoin Wallets as IOCs for Ransomware

Tracking Bitcoin Wallets as IOCs for Ransomware is the third post of a threat intelligence dashboard series developed by TruSTAR and Dark Reading. The full analysis is hosted on Dark Reading.

TruSTAR is one of the first threat intelligence platforms to track Bitcoin wallet addresses as an IOC. By tracking Bitcoin wallet addresses on our platform, we’ve been able to connect the dots between ransomware, wallet addresses and shared infrastructure, TTPs, and attribution.

To help you investigate this trend further on your own, we’ve provided a .txt file for download of the top ten bitcoin addresses with the highest IOC correlations we have observed on TruSTAR’s threat intelligence platform.

If you have any questions about this research, don’t hesitate to send our Data Science Unit a note via

Download Bitcoin IOCs

Thanks for reading and happy hunting.

Black Hat 2019 Recap: Strategies for Understanding Your Attacker   Read More
CSA Security Update Podcast: TruSTAR CEO Paul Kurtz on the Value of Information Sharing on Threat Intelligence   TruSTAR’s CEO and co-founder Paul Kurtz recently appeared on Cloud Security Alliance’s podcast, CSA Security Update, and sat down with podcast host ... Read More
TruSTAR Sits Down With the Shape Security's Director of Engineering to Discuss Fraud & Account Takeover Trends The TruSTAR team recently had the opportunity to sit down with Jarrod Overson, the Director of Engineering at Shape Security. Jarrod, an expert in ... Read More
Intelligence Management and Gartner's SOAR: Thinking About Workflow First Gartner's Security Orchestration Automation and Response (SOAR) market category was announced in November 2017, and since then we've seen numerous ... Read More