Why Ransomware Attackers Demanded Payments In Bitcoins

Bitcoin is in the news again after Friday's worldwide ransomware attack. The malicious software locks down victims' computers and refuses to grant them access to their files unless they agree to pay at least $300 in bitcoin. Which may have you wondering: What is bitcoin? And why do the attackers want payment in that currency?

Here's a refresher on bitcoin and how it's connected to the ongoing security issue.

Q: What is bitcoin?

A: Bitcoin is a kind of digital currency. You can buy it with dollars and euros, just like you can trade any other currency. You store it in an online "wallet." And with that wallet, you can spend bitcoin online and in the physical world for goods and services. Even PayPal supports bitcoin.

And, of course, bitcoin has a valuation, which you may have heard about because bitcoin's price has fluctuated up and down.

Q: What's different about bitcoin?

A: Usually if you pay for something on the Internet, you use a credit or debit card. That card is connected to information about you, such as your name and billing address.

You can use bitcoin the same way, but unlike a credit card, the transactions you make using the currency are completely anonymous. They can't be used to identify you personally. Instead, whenever you trade in bitcoin, you use a so-called private key associated with your wallet to generate a bit of code - called an address - that is then publicly associated with your transaction but with no personal identifying information. And in that way, every transaction is recorded and securely signed in an open ledger that anyone can read and double-check.

Q: So you can use bitcoin to protect your privacy. Is that why the WannaCry attackers picked bitcoin as a form of payment?

A: Possibly. Bitcoin has certainly gained prominence in the press as a technology that can facilitate crime. But just because the identities of people in a bitcoin transaction may be hidden, the public ledger has increasingly helped law enforcement trace the movement of bitcoins from place to place.

The Justice Department has successfully prosecuted online criminal operations that used bitcoin. In 2013, the U.S. government arrested Ross Ulbricht, the founder of a major underground drug market, and seized more than $3.5 million worth of bitcoin. Two undercover FBI agents associated with the investigation were later accused of stealing some of that currency.

Q: Could law enforcement wind up doing something similar with WannaCry?

A: The government is already investigating. On Monday, Homeland Security Adviser Tom Bossert told reporters that "attribution" -- the process of figuring out who was responsible for the crime -- is generally pretty tough to do with computer attacks. Often, the attackers are located beyond the reach of U.S. law enforcement or have shrouded their activities behind multiple layers of security. But, said Bossert, "I don't want to say that we have no clues."

Q: How much money have the attackers collected?

A: So far, it looks to be about $55,000, according to a bot designed by the news site Quartz that is tracking the amount of money in the attackers' wallets.

Considering that Europol, the European Union law enforcement agency, has said that more than 200,000 computers have been infected with the malware, that doesn't seem like a lot of money. Still, the value of a single bitcoin has risen steadily in recent years. Hours before WannaCry began spreading last week, the price of one bitcoin hit an all-time high of $1,830. Some analysts predict that it could break $3,000 by year's end - although the price fell by $200 after the attack was revealed.

In light of how cheaply and easily hackers can push out ransomware, winning even a handful of bitcoins and holding onto them for a while could make the cyberthieves a large sum of money.

(This story has not been edited by NDTV staff and is auto-generated from a syndicated feed.)