Bitcoin Abuse Database

Report history for 149w62rY42aZBox8fGcmqNsXUzSStKeq8C

Address found in database:
Address 149w62rY42aZBox8fGcmqNsXUzSStKeq8C
View address on
Report Count1
Latest ReportMon, 03 Dec 18 06:03:55 +0000
(4 years ago)

If you have additional information about this address, please file a report.


Date Abuse Type Description
Dec 3, 2018 ransomware Central to the SamSam ransomware scheme’s success were Khorashadizadeh and Ghorbaniyan, who helped the cyber actors exchange digital currency derived from ransom payments into Iranian rial and also deposited the rial into Iranian banks. To help convert the digital currency ransom payments into rial, Khorashadizadeh and Ghorbaniyan used the following two digital currency addresses: 149w62rY42aZBox8fGcmqNsXUzSStKeq8C and 1AjZPMsnmpdK2Rv9KQNfMurTXinscVro9V. Since 2013, Khorashadizadeh and Ghorbaniyan have used these two digital currency addresses to process over 7,000 transactions, to interact with over 40 exchangers—including some US-based exchangers—and to send approximately 6,000 bitcoin worth millions of USD, some of which involved bitcoin derived from SamSam ransomware.