Blockchain tracing supports some claims in alleged extortion crew chat leak
Blockchain researchers have corroborated parts of a purported leak from the Silent Ransom Group (SRG), a cybercrime crew that steals data and demands payment. Their findings support some claims about the group’s cryptocurrency flows, but do not authenticate the full collection or verify its headline total.
The leaked chats claim SRG took about $207 million from 27 firms between April and September 2026, a figure Crystal Intelligence could not confirm. Researchers traced funds linked to a known SRG member, including a wallet funded entirely by a victim payment of more than $10 million. The chats also describe payments to affiliates and cash brokers, and advice on disguising proceeds; SRG has targeted law firms since around 2022 and is known for callback phishing and physical intrusions.
- Researchers verified links between some leaked wallets and SRG.
- The claimed $207 million total remains unconfirmed.
- The chats describe cash brokers and ways to spend proceeds.
New here? Start with this
The Silent Ransom Group is a cybercrime organisation that breaks into company networks, steals confidential information, and demands payment by threatening to release or sell the stolen data. This method of crime has become increasingly common, with different criminal gangs targeting organisations across multiple sectors.
Documents allegedly created by group members claim the organisation stole approximately $207 million from 27 companies over five months in 2026. The messages describe how profits were split among members and paid associates, techniques for hiding the money, and details about their targets and methods, including phishing attacks and physical break-ins against law firms.
Researchers who specialise in tracking cryptocurrency examined the digital money movements described in the alleged messages and confirmed that some transactions matched the group's known financial patterns. However, they could not verify that all the messages are genuine or confirm the claimed total, so whilst some parts appear authentic, the complete leak remains unconfirmed.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
The blockchain corroboration of specific transactions and flows to known SRG wallets provides credible evidence supporting the leak's authenticity and validates the chats' content. Researchers' ability to trace funds—including a $10+ million victim payment—demonstrates that the leaked information about SRG's operations, affiliate structures, and payment methods contains accurate details. This partial verification strengthens confidence in the intelligence and provides law enforcement with validated information about the group's real activities.
The case against
Partial verification of some transactions does not authenticate the entire leak or confirm its major claims. The unconfirmed $207 million total and the full scope of SRG's operations remain largely unverified, and tracing a few specific wallets does not prove the authenticity of the complete chat collection. A responsible interpretation must distinguish carefully between the limited facts that have been verified and the broader claims that remain asserted but unproven.
Americas Art Business Crypto Culture Research Science World
Read the full article at the source →
Originally published by The Register as “Money trail backs leaked chats from extortion crew that walks into US law firms”.