The bitcoins accrued тАУ known ransom demands range from the hundreds to thousands of dollars, according to the report тАУ are then washed through multiple addresses and known bitcoin services, though none are named directly in the report. Some of the funds are essentially reinvested in new exploit kits or rent payments for botnets.
Revenue-wise, the reportтАЩs authors note that, for its backers, CryptoWall "is extremely successful and continues to provide significant income".
"One variant alone involved with the 'crypt100' campaign identifier resulted in over 15,000 victims across the globe," the report states. "These 15,000 victims alone would account for, at minimum, roughly $5m in profit for the CW3 group.