Patent ID: 11888892
Assignee: CIPHERTRACE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 7:
8. A system, comprising:
a processor; and
a memory for storing instructions, the processor executing the instructions to:
analyze a screenshot of a ransomware note displayed on an end user device, associated with a cryptocurrency-based malware or ransomware attack;
based on the analyzing:
identify a uniform resource locator (URL) of a decryptor download site of the cryptocurrency-based malware or ransomware attack; and
identify a cryptocurrency payment address of the cryptocurrency-based malware or ransomware attack;

identify additional cryptocurrency addresses included in a sample code of the cryptocurrency-based malware or ransomware attack;
store the additional cryptocurrency addresses to a malware or ransomware attack database;
trace a ransom payment paid to the cryptocurrency payment address in response to the cryptocurrency-based malware or ransomware attack;
based on the tracing of the ransom payment paid to the cryptocurrency payment address, store the cryptocurrency payment address in the malware or ransomware attack database; and
identify a proposed cryptocurrency transaction that includes an address that is included in the malware or ransomware attack database.