Connect with us

Published

on

In this article

When the FBI successfully breached a crypto wallet held by the Colonial Pipeline hackers by following the money trail on bitcoin’s blockchain, it was a wake-up call for any cyber criminals who thought transacting in cryptocurrency automatically protected them from scrutiny.

One of the core tenets of bitcoin is that its public ledger, which stores all token transactions in its history, is visible to everyone. This is why more hackers are turning to coins like dash, zcash, and monero, which have additional anonymity built into them.

Monero, in particular, is increasingly the cryptocurrency of choice for the world’s top ransomware criminals.

“The more savvy criminals are using monero,” said Rick Holland, chief information security officer at Digital Shadows, a cyberthreat intelligence company.

Created in 2014

Monero was released in 2014 by a consortium of developers, many of whom chose to remain anonymous. As spelled out in its white paper, “privacy and anonymity” are the most important aspects of this digital currency.

The privacy token operates on its own blockchain, which hides virtually all transaction details. The identity of the sender and recipient, as well as the transaction amount itself, are disguised.

Because of these anonymity features, monero allows cyber criminals greater freedom from some of the tracking tools and mechanisms that the bitcoin blockchain offers.

“On the bitcoin blockchain, you can see what wallet address transacted, how many bitcoin, where it came from, where it’s going,” explained Fred Thiel, former chairman of Ultimaco, one of the largest cryptography companies in Europe, which has worked with Microsoft, Google and others on post-quantum encryption.

“With monero, [the blockchain] obfuscates the wallet address, the amount of the transactions, who the counter-party was, which is pretty much exactly what the bad actors want,” he said.

With monero, they’re obfuscating the wallet address, the amount of the transactions, who the counter-party was, which is pretty much exactly what the bad actors want.
Fred Thiel
CEO, Marathon Digital Holdings

While bitcoin still dominates ransomware demands, more threat actors are starting to ask for monero, according to Marc Grens, president of DigitalMint, a company that helps corporate victims pay ransoms. 

“We’ve seen REvil…give discounts or request payments in monero, just in the past couple months,” continued Holland.

Monero was also a popular choice on AlphaBay, a massive underground marketplace popular up until it was shut down in 2017.

“It’s almost like we’re seeing, at least from a cyber criminal perspective, a resurgence…in monero, because it has inherently more privacy than some of the other coins out there,” Holland said of monero’s recent rise in popularity among actors in the ransomware space.

Monero’s limitations

There are, however, a few major barriers when it comes to the mainstreaming of monero.

For one, it’s not as liquid as other cryptocurrencies — many regulated exchanges have chosen not to list it due to regulatory concerns, explained Mati Greenspan, portfolio manager and Quantum Economics founder. “It certainly isn’t enjoying as much from the recent wave of institutional investments,” he said.

In practice, that means that it’s harder for cyber criminals to get paid directly in the currency.

“If you’re a corporation and you want to acquire a bunch of monero to pay somebody, it’s very hard to do,” Thiel told CNBC. 

The digital currency could also be more vulnerable to regulation at its on-and-off-ramps, which is the bridge between fiat cash and crypto tokens. 

“I would wager to say the U.S. and other regulators are going to shut them [monero] down pretty hard,” said Thiel.

One way they could go about that: telling an exchange that if they list monero, they risk losing their license.  

But while the U.S. government can indeed keep monero at bay by marginalizing liquidity points, Castle Island Ventures founding partner Nic Carter believes that markets which allow peer-to-peer transfers of monero to fiat will always be hard to regulate. 

There’s also nothing to keep hackers within U.S. jurisdiction. Criminals could easily choose to carry out all of their transactions overseas, in places that aren’t subject to the kind of controls American regulators might put in place.

Bitcoin still rules ransomware

Cyber insurance is another reason why bitcoin is still the currency of choice for most ransomware attacks.

“Insurance is so important in this space, and insurers often refuse to reimburse a ransom payment if it’s been in monero,” said former CIA case officer Peter Marta, who now advises companies about cyber risk management as a partner with law firm Hogan Lovells. 

“One of the things that insurers will always ask for is what type of due diligence the victim company conducted, before making the payment…to try to minimize the chance that the payment goes to an entity on the sanctions list,” explained Marta. 

Traceability is more easily accomplished with bitcoin, given that its blockchain lays bare transaction amounts and the addresses of both the sender and recipients taking part in the exchange. There is also an established infrastructure already in place for officials to monitor these transactions.

Authorities keep lists of bitcoin wallets, which are tied to different sanctions regimes.

While monero does offer a greater degree of privacy over bitcoin, Holland points out that threat actors have mastered certain techniques to anonymize transactions in bitcoin, in order to obscure the chain of custody. 

He says that cyber criminals often turn to a mixing or tumbling service, where they can combine the illicit funds with clean crypto to essentially make a new type of bitcoin, at which point, they turn to currency swaps. 

“Just like you would do dollars to pounds…they may go bitcoin, to monero, then back to bitcoin, and then get a bitcoin ATM card, where they can just cash out dollars with it,” explained Holland.

So even though bitcoin’s blockchain is public, there are still ways to make it difficult for investigators to trace transactions to their ultimate destination. 

Continue Reading

Technology

U.S. prosecutors seek 36-month sentence for ex-Binance CEO Changpeng Zhao

Published

on

By

U.S. prosecutors seek 36-month sentence for ex-Binance CEO Changpeng Zhao

Changpeng Zhao, founder and CEO of Binance, attends the Viva Technology conference dedicated to innovation and startups at Porte de Versailles exhibition center in Paris on June 16, 2022.

Benoit Tessier | Reuters

U.S. prosecutors are seeking an above-guidance sentence of 36 months for the former CEO of cryptocurrency exchange Binance on charges of enabling money laundering, according to a sentencing memorandum out late Tuesday.

The memorandum, which was filed with the court for the western district of Washington, states that Zhao should serve a higher sentence that suggested under advisory guidelines to “reflect the gravity of his crimes.”

Under advisory guidelines, Zhao’s sentencing would come in at a range of 12 to 18 months in prison.

“A custodial sentence of 36 months—twice the high end of the Guidelines range—would reflect the seriousness of the offense, promote respect for law, afford adequate deterrence, and be sufficient but not greater than necessary to achieve the goals of sentencing,” U.S. prosecutors said.

Zhao is accused of wilfully failing to implement an effective anti-money laundering program as required by the Bank Secrecy Act, and of effectively allowing Binance to process transactions involving proceeds of unlawful activity, including transactions between Americans and individuals in sanctions jurisdictions.

Binance has separately been sued by the U.S. Securities and Exchange Commission and the Commodity Futures Trading Commission over the alleged mishandling of customer assets and the operation of an illegal, unregistered exchange in the U.S.

This crypto cycle is different from past ones, Binance CEO says

The U.S., which separately accuses Binance and Zhao of violating the U.S. Bank Secrecy Act and sanctions on Iran, ordered Binance to pay $4.3 billion in fines and forfeiture. Zhao agreed to pay a $50 million fine.

Zhao stepped down as Binance’s CEO in November last year after reaching this plea and was replaced by the former Abu Dhabi markets regulator’s chief, Richard Teng.

Zhao was not immediately available for comment when contacted via social media platform X. Binance has yet to return a request for comment when contacted by CNBC.

‘Unprecedented scale’ of financial crime

Prosecutors say that Zhao violated U.S. law on an “unprecedented scale,” and that he had a “deliberate disregard” for Binance’s legal responsibilities.

In the memorandum of Tuesday, prosecutors said that, under Zhao’s control, Binance operated on a “Wild West” model.

“Zhao bet that he would not get caught, and that if he did, the consequences would not be as serious as the crime,” the memorandum stated.

“But Zhao was caught, and now the Court will decide what price Zhao should pay for his crimes.”

Zhao’s official sentencing is expected to take place on April 30.

New Binance CEO: Building a robust compliance program after an immature past

Continue Reading

Technology

Amazon is opening cloud regions in Southeast Asia to meet customer demand, CTO says

Published

on

By

Amazon is opening cloud regions in Southeast Asia to meet customer demand, CTO says

Generative AI has to incorporate cultural knowledge, Amazon CTO says

Amazon is opening cloud regions in Southeast Asia because customers want their data stored securely in their own countries, Amazon Chief Technology Officer Werner Vogels said in an exclusive interview.

“The reason for this is that many of our customers have been asking for that. They really wanted something local such that they can meet, for example, local data storage requirements, or protection of personal identifiable information,” Vogels told CNBC’s JP Ong.

Amazon’s cloud computing division, Amazon Web Services, was the world’s largest cloud service provider in the fourth quarter, accounting for 31% of total cloud spending, according to a Feb. 26 report from Canalys.

An AWS region is a physical location where data centers are clustered. Within each AWS region are a minimum of three separate availability zones. Each zone has its own power, cooling and physical security and is connected through redundant, ultra-low-latency networks.

“And it’s not just startups that are looking for that. Big enterprises and government agencies as well. You can imagine government agencies want to go through a digital transformation as well,” Vogels said.

“And for them, it’s important to have these kinds of technologies on the ground, in [the] country to make sure that they can serve their customers best or their citizens best,” said Vogels.

Google Cloud CEO: We're monetizing AI in a variety of ways

Amazon in November said it is launching a new AWS Region in Malaysia this year. It previously committed a 25.5 billion Malaysian ringgit ($6 billion) investment by 2037 to support the government’s ambitions to transform Malaysia into a “high-income” digital economy by 2030.

“This new AWS Region will also enable customers with data residency preferences to store data securely in Malaysia, help customers to achieve even lower latency, and serve demand for cloud services across Southeast Asia,” the statement said.

This comes after AWS opened a cloud region in Indonesia in December 2021 and in Singapore in 2010. AWS is also planning to launch an infrastructure region in Thailand.

AWS already operates multiple regions across North America, South America, Europe, China, Asia Pacific, South Africa and the Middle East.

“And especially, of course, the security capabilities that AWS has, that allows us to protect these customers. Security, will be, and is forever, our number one priority. [It] is our number one investment area,” said Vogels.

“And to be able to keep customers safe in our compute regions, [it] is of great attraction to companies here in the region and also governments.”

Continue Reading

Technology

Oracle is moving its world headquarters to Nashville to be closer to health-care industry

Published

on

By

Oracle is moving its world headquarters to Nashville to be closer to health-care industry

Larry Ellison, co-founder and chairman of Oracle, speaks during the Oracle OpenWorld 2017 conference in San Francisco on Oct. 3, 2017.

David Paul Morris | Bloomberg | Getty Images

Oracle Chairman Larry Ellison said Tuesday that the company is moving its world headquarters to Nashville, Tennessee, to be closer to a major health-care epicenter.

In a wide-ranging conversation with Bill Frist, a former U.S. Senate Majority Leader, Ellison said Oracle is moving a “huge campus” to Nashville, “which will ultimately be our world headquarters.” He said Nashville is an established health center and a “fabulous place to live,” one that Oracle employees are excited about.

“It’s the center of the industry we’re most concerned about, which is the health-care industry,” Ellison said.

The announcement was seemingly spur-of-the-moment. “I shouldn’t have said that,” Ellison told Frist, a longtime health-care industry veteran who represented Tennessee in the Senate. The pair spoke during a fireside chat at the Oracle Health Summit in Nashville.

Shares of Oracle were mostly flat in extended trading Tuesday.

Oracle moved its headquarters from Silicon Valley to Austin, Texas, in 2020. The company has been making a major push into health care in recent years, most notably with its $28 billion acquisition of the medical records software giant Cerner. Ellison said Tuesday that Oracle is relatively new to the health-care sector, but he believes the company has a “moral obligation” to solve problems facing the industry.

Nashville has been a major player in the health-care scene for decades, and the city is now home to a vibrant network of health systems, startups and investment firms. The city’s reputation as a health-care hub was catalyzed when HCA Healthcare, one of the first for-profit hospital companies in the U.S., was founded there in 1968.

HCA helped attract troves of health-care professionals to Nashville, and other organizations quickly followed suit. Oracle has been developing its new $1.2 billion campus in the city for about three years, according to The Tennessean

“Our people love it here, and we think it’s the center of our future,” Ellison said.

Oracle did not immediately respond to CNBC’s request for comment.

Don’t miss these exclusives from CNBC PRO

Continue Reading

Trending