Travel giant CWT just payed 414 BTC to have 2 TB of company data unencrypted, after it it was taken hostage by an encryption script deployed by hackers.
Here, we are tracking where the payment goes. We can see on July 28 the
ransom payment was sent. $7605abd7afa8a4b851d393a682bf845cb70715da38ba15df3fde67455cb6f4f7
The hackers began moving the coins 2.5 hours after the payment, first by sending a 1 BTC test send to their new wallet $58a22a5a40a8cb98df8398567f33402c577affbb8d3d0c993fa17289c24d