Why some cyber criminals are ditching bitcoin for a cryptocurrency called monero

Published

4 years ago

June 13, 2021

admin

In this article

MARA

When the FBI successfully breached a crypto wallet held by the Colonial Pipeline hackers by following the money trail on bitcoin’s blockchain, it was a wake-up call for any cyber criminals who thought transacting in cryptocurrency automatically protected them from scrutiny.

One of the core tenets of bitcoin is that its public ledger, which stores all token transactions in its history, is visible to everyone. This is why more hackers are turning to coins like dash, zcash, and monero, which have additional anonymity built into them.

Monero, in particular, is increasingly the cryptocurrency of choice for the world’s top ransomware criminals.

“The more savvy criminals are using monero,” said Rick Holland, chief information security officer at Digital Shadows, a cyberthreat intelligence company.

Created in 2014

Monero was released in 2014 by a consortium of developers, many of whom chose to remain anonymous. As spelled out in its white paper, “privacy and anonymity” are the most important aspects of this digital currency.

The privacy token operates on its own blockchain, which hides virtually all transaction details. The identity of the sender and recipient, as well as the transaction amount itself, are disguised.

Because of these anonymity features, monero allows cyber criminals greater freedom from some of the tracking tools and mechanisms that the bitcoin blockchain offers.

“On the bitcoin blockchain, you can see what wallet address transacted, how many bitcoin, where it came from, where it’s going,” explained Fred Thiel, former chairman of Ultimaco, one of the largest cryptography companies in Europe, which has worked with Microsoft, Google and others on post-quantum encryption.

“With monero, [the blockchain] obfuscates the wallet address, the amount of the transactions, who the counter-party was, which is pretty much exactly what the bad actors want,” he said.

With monero, they’re obfuscating the wallet address, the amount of the transactions, who the counter-party was, which is pretty much exactly what the bad actors want.

Fred Thiel

CEO, Marathon Digital Holdings

While bitcoin still dominates ransomware demands, more threat actors are starting to ask for monero, according to Marc Grens, president of DigitalMint, a company that helps corporate victims pay ransoms.

“We’ve seen REvil…give discounts or request payments in monero, just in the past couple months,” continued Holland.

Monero was also a popular choice on AlphaBay, a massive underground marketplace popular up until it was shut down in 2017.

“It’s almost like we’re seeing, at least from a cyber criminal perspective, a resurgence…in monero, because it has inherently more privacy than some of the other coins out there,” Holland said of monero’s recent rise in popularity among actors in the ransomware space.

Monero’s limitations

There are, however, a few major barriers when it comes to the mainstreaming of monero.

For one, it’s not as liquid as other cryptocurrencies — many regulated exchanges have chosen not to list it due to regulatory concerns, explained Mati Greenspan, portfolio manager and Quantum Economics founder. “It certainly isn’t enjoying as much from the recent wave of institutional investments,” he said.

In practice, that means that it’s harder for cyber criminals to get paid directly in the currency.

“If you’re a corporation and you want to acquire a bunch of monero to pay somebody, it’s very hard to do,” Thiel told CNBC.

The digital currency could also be more vulnerable to regulation at its on-and-off-ramps, which is the bridge between fiat cash and crypto tokens.

“I would wager to say the U.S. and other regulators are going to shut them [monero] down pretty hard,” said Thiel.

One way they could go about that: telling an exchange that if they list monero, they risk losing their license.

But while the U.S. government can indeed keep monero at bay by marginalizing liquidity points, Castle Island Ventures founding partner Nic Carter believes that markets which allow peer-to-peer transfers of monero to fiat will always be hard to regulate.

There’s also nothing to keep hackers within U.S. jurisdiction. Criminals could easily choose to carry out all of their transactions overseas, in places that aren’t subject to the kind of controls American regulators might put in place.

Bitcoin still rules ransomware

Cyber insurance is another reason why bitcoin is still the currency of choice for most ransomware attacks.

“Insurance is so important in this space, and insurers often refuse to reimburse a ransom payment if it’s been in monero,” said former CIA case officer Peter Marta, who now advises companies about cyber risk management as a partner with law firm Hogan Lovells.

“One of the things that insurers will always ask for is what type of due diligence the victim company conducted, before making the payment…to try to minimize the chance that the payment goes to an entity on the sanctions list,” explained Marta.

Traceability is more easily accomplished with bitcoin, given that its blockchain lays bare transaction amounts and the addresses of both the sender and recipients taking part in the exchange. There is also an established infrastructure already in place for officials to monitor these transactions.

Authorities keep lists of bitcoin wallets, which are tied to different sanctions regimes.

While monero does offer a greater degree of privacy over bitcoin, Holland points out that threat actors have mastered certain techniques to anonymize transactions in bitcoin, in order to obscure the chain of custody.

He says that cyber criminals often turn to a mixing or tumbling service, where they can combine the illicit funds with clean crypto to essentially make a new type of bitcoin, at which point, they turn to currency swaps.

“Just like you would do dollars to pounds…they may go bitcoin, to monero, then back to bitcoin, and then get a bitcoin ATM card, where they can just cash out dollars with it,” explained Holland.

So even though bitcoin’s blockchain is public, there are still ways to make it difficult for investigators to trace transactions to their ultimate destination.

Technology

How black boxes became key to solving airplane crashes

Published

14 hours ago

November 30, 2025

admin

How black boxes became key to solving airplane crashes

After the search for survivors and recovery of victims in tragic aviation accidents — like that of a UPS cargo plane shortly after takeoff from Louisville Muhammad Ali International Airport in Kentucky last month — comes the search for flight data and a cockpit voice recorder often called the “black box.”

Every commercial plane has them. Aerospace giants GE Aerospace and Honeywell are among a few companies that design them to be nearly indestructible so they can help investigators understand the cause of a crash.

“They’re very crucial because it’s one of the few sources of information that tells us what happened leading up to the accident,” said Chris Babcock, branch chief of the vehicle recorder division at the National Transportation Safety Board. “We can get a lot of information from parts and from the airplane.”

Commercial aircraft have become very complex. A Boeing 787 Dreamliner records thousands of different pieces of information. In the case of the Air India crash in June, data revealed both engine fuel switches were put into a cutoff position within one second of each other. A voice recording from inside the cockpit captured the pilots discussing the cutoffs.

“All of those parameters today can have a very huge impact on the investigation,” said former NTSB member John Goglia. “It’s our goal to to provide information back to our investigators who are on scene as quick as we can to help move the investigation forward.”

This crucial data can also help prevent future accidents. A crash can cost airlines or plane manufacturers hundreds of millions of dollars and leave victims’ families with a lifetime of grief.

But in some circumstances black boxes were destroyed or never found. Experts say further developments such as cockpit video recorders and real-time data streaming are needed.

“The technology is there. Crash worthy cockpit video recorders are already being installed in a lot of helicopters and other types of airplanes, but they’re not required,” said Jeff Guzzetti, aviation analyst and former accident investigator for the Federal Aviation Administration and NTSB. “There’s privacy and cost issues involving cockpit video recorders but the NTSB has been recommending that the FAA require them for years now.”

Watch the video to learn more.

— CNBC’s Leslie Josephs contributed to this report.

Technology

Stocks end November with mixed results despite a strong Thanksgiving week rally

Published

2 days ago

November 28, 2025

admin

Stocks end November with mixed results despite a strong Thanksgiving week rally

Technology

Palantir has worst month in two years as AI stocks sell off

Published

2 days ago

November 28, 2025

admin

Palantir has worst month in two years as AI stocks sell off

CEO of Palantir Technologies Alex Karp attends the Pennsylvania Energy and Innovation Summit, at Carnegie Mellon University in Pittsburgh, Pennsylvania, U.S., July 15, 2025.

Nathan Howard | Reuters

It’s been a tough November for Palantir.

Shares of the software analytics provider dropped 16% for their worst month since August 2023 as investors dumped AI stocks due to valuation fears. Meanwhile, famed investor Michael Burry doubled down on the artificial intelligence trade and bet against the company.

Palantir started November off on a high note.

The Denver-based company topped Wall Street’s third-quarter earnings and revenue expectations. Palantir also posted its second-straight $1 billion revenue quarter, but high valuation concerns contributed to a post-print selloff.

In a note to clients, Jefferies analysts called Palantir’s valuation “extreme” and argued investors would find better risk-reward in AI names such as Microsoft and Snowflake. Analysts at RBC Capital Markets raised concerns about the company’s “increasingly concentrated growth profile,” while Deutsche Bank called the valuation “very difficult to wrap our heads around.”

Adding fuel to the post-earnings selloff was the revelation that Burry is betting against Palantir and AI chipmaker Nvidia. Burry, who is widely known for predicting the housing crisis that occurred in 2008 and the portrayal of him in the film “The Big Short,” later accused hyperscalers of artificially boosting earnings.

Palantir CEO Alex Karp vocally hit the front lines, appearing twice in one week on CNBC, where he accused Burry of “market manipulation” and called the investor’s actions “egregious.”

“The idea that chips and ontology is what you want to short is bats— crazy,” Karp told CNBC’s “Squawk Box.”

Despite the vicious selloff, Palantir has notched some deal wins this month. That included a multiyear contract with consulting firm PwC to speed up AI adoption in the U.K. and a deal with aircraft engine maintenance company FTAI.

But those announcements did little to shake off valuation worries that have haunted all AI-tied companies in November.

Across the board, investors have viciously ditched the high-priced group, citing fears of stretched valuations and a bubble.

In November, Nvidia pulled back more than 12%, while Microsoft and Amazon dropped about 5% each. Quantum computing names such as Rigetti Computing and D-Wave Quantum have shed more than a third of their value.

Apple and Alphabet were the only Magnificent 7 stocks to end the month with gains.

Sill, questions linger over Palantir’s valuation, and those worries aren’t a new concern.

Even after its steep price drop, the company’s stock trades at 233 times forward earnings. By comparison, Nvidia and Alphabet traded at about 38 times and 30 times, respectively, at Friday’s close.

Karp, who has long defended the company, didn’t miss an opportunity to clap back at his critics, arguing in a letter to shareholders that the company is making it feasible for everyday investors to attain rates of return once “limited to the most successful venture capitalists in Palo Alto.”

“Please turn on the conventional television and see how unhappy those that didn’t invest in us are,” Karp said during an earnings call. “Enjoy, get some popcorn. They’re crying. We are every day making this company better, and we’re doing it for this nation, for allied countries.”

Palantir declined to comment for this story.

WATCH: Palantir CEO Alex Karp: We’ve printed venture results for the average American