Ransomware payments in the Bitcoin ecosystem
Addresses and payments tied to ransomware families, as CSV tables of per-family seed addresses, collector addresses with their multi-input cluster id, and the transactions paying them with hash, timestamp and value. Produced by the authors on the GraphSense platform, which expands the seed addresses into clusters and follows their payments. Useful for estimating ransom revenue per family; the figures are a lower bound and the clustering can merge unrelated users.