Cashout Service for Ransomware Scammers
Summary: A ransomware cashout service hosted in Minsk, Belarus checks victims' MoneyPak voucher codes by abusing a page on betamerica.com, a legitimate US site for betting on dog and horse races, and charges a fee of 0.6 - more than half the value of each voucher. Krebs reports nearly 24,000 MoneyPak codes checked through the service, which at $300 apiece would mean more than $7 million in ransom money cleared.
Why it matters: The ransomware economy has specialized to the point where a third party takes a 60% cut just to convert $300 MoneyPak vouchers into cash, and it does so through a legal US betting site rather than a bank - a reminder that the payout layer, not the malware, is where the money actually moves.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026