logo

Wallets tied to CDK ransom group received $25 million two days after attack 

ID: dac15d19-2154-54ad-a8d3-510363538ee0

STIX ID: report--dac15d19-2154-54ad-a8d3-510363538ee0

Feed Name: CyberScoop

Threat Score
78/100

Date Published: 2024-07-12

Date Updated: 2026-04-21

Author: AJ Vicens

...
...

Researchers say the BlackSuit ransomware group is likely behind a June attack on CDK Global that disrupted software used by ~15,000 U.S. car dealerships; blockchain analysis identified a ~387 BTC (~$25M) payment to a BlackSuit-linked wallet and subsequent laundering of funds across many transactions and exchange addresses, though CDK and its parent have not confirmed making a ransom payment.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.