BREAKING NEWS : Minneapolis cop who knelt on George Floyd's neck charged with murder Full Story

How Mueller used Bitcoin to catch Russia

Article Image

The Mueller report highlights President Trump's relationship with Wikileaks, showing a closer relationship than previously believed. CNN's Alex Marquardt reports.

Posted: Apr 20, 2019 3:29 PM


Russian operatives used cryptocurrency at almost every stage in their online efforts to interfere in the 2016 U.S. presidential election, according to Special Counsel Robert Mueller's final report on his investigation.

Systems used in the hacking of the Democratic Party were paid for using Bitcoin, as were online hosting services that supported websites which published hacked materials and were used in the targeting of disinformation at American voters. The hacking and disinformation campaigns accounted for the vast majority of Russia's online efforts to influence the 2016 election.

All Bitcoin transactions are posted to an immutable public ledger, known as a blockchain. While the blockchain doesn't contain obvious identifying information about the person behind a transaction, once someone figures out a user is responsible for one transaction it can be possible to track their entire Bitcoin history.

Russian agents, including those from the GRU, Russia's military intelligence agency, had sought to, as the Mueller indictment of GRU agents last July outlined, "capitalize on the perceived anonymity of cryptocurrencies." But while Bitcoin allowed Russians to "avoid direct relationships with traditional financial institutions, allowing them to evade greater scrutiny of their identities and sources of funds," according to the same indictment, it wasn't enough to evade Mueller's investigation.

Tim Cotten, a blockchain developer and security researcher who has done extensive work in tracking Russian Bitcoin accounts unearthed by Mueller's team, noted in an interview with CNN Business that trading Bitcoins on exchanges usually requires users to set up Bitcoin wallets that are tied to an email address. Federal investigators were able to access at least some of the email accounts used in the operation, which, Cotten says, would have made tracing Bitcoin transactions a lot easier.

Investigators' access to the "the other side of the blockchain equation," as he described it, was important because, "Rather than having to search the blockchain for clues, they already had all of the receipts demonstrating which accounts were under the GRU's control."

The Russians used stolen and false identities in setting up some of these accounts, according to Mueller's team, but had used some of the same accounts to purchase servers and website domains involved in the hacking of the Democratic Party and the publishing of the hacked materials, Mueller's indictment outlines. That, Cotten said, would have made it easier for investigators to tie the case together.

A virtual private network, a way to obscure the location from which a user is accessing the internet, was also purchased using Bitcoin, Mueller found; that network was used to login at @Guccifer_2, the infamous Twitter account that communicated with Wikileaks and others, Mueller's investigation found.

Indiana Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 33068

Reported Deaths: 2068
CountyConfirmedDeaths
Marion9524558
Lake3494175
Cass15897
Allen141966
St. Joseph122134
Hendricks114268
Hamilton113292
Elkhart110128
Johnson1092106
Madison58459
Porter50522
Bartholomew49034
Clark47941
LaPorte42022
Tippecanoe3823
Howard37824
Delaware37636
Jackson3721
Shelby36822
Hancock32727
Floyd31739
Boone30535
Morgan27724
Vanderburgh2592
Montgomery23417
White2308
Decatur22431
Clinton2221
Noble20421
Grant19721
Dubois1903
Harrison18921
Henry16910
Greene16824
Monroe16512
Warrick16528
Dearborn16521
Vigo1538
Lawrence15223
Miami1401
Putnam1357
Jennings1294
Orange12422
Scott1203
Ripley1106
Franklin1098
Kosciusko1011
Carroll933
Daviess8416
Steuben812
Marshall801
Newton7610
Wayne756
Fayette747
Wabash742
LaGrange682
Jasper661
Washington511
Jay490
Fulton471
Clay461
Rush452
Randolph453
Jefferson431
Pulaski410
Whitley383
Owen351
Sullivan341
DeKalb331
Brown331
Starke323
Perry280
Wells270
Benton260
Huntington262
Knox250
Tipton241
Crawford230
Blackford222
Parke190
Spencer191
Switzerland190
Fountain182
Posey160
Gibson142
Adams131
Ohio130
Warren121
Vermillion100
Martin90
Union80
Pike60
Unassigned0161

Ohio Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 33915

Reported Deaths: 2098
CountyConfirmedDeaths
Franklin5566253
Cuyahoga4211226
Marion264225
Hamilton2555135
Lucas2178240
Pickaway204836
Mahoning1397173
Summit1335172
Butler84728
Stark70591
Columbiana68451
Lorain66759
Montgomery63717
Trumbull55147
Belmont41212
Miami35230
Warren35119
Tuscarawas3373
Ashtabula32434
Portage31857
Medina31322
Delaware31013
Lake29012
Wood28246
Geauga27231
Wayne26049
Fairfield2515
Clark2345
Licking22210
Allen20632
Clermont2025
Mercer2016
Richland1933
Erie1656
Darke16221
Madison1487
Washington11819
Crawford1103
Morrow1041
Greene1015
Ottawa9312
Putnam8814
Monroe7512
Sandusky7211
Hocking694
Ross672
Jefferson662
Auglaize653
Huron561
Williams511
Hancock512
Union491
Muskingum480
Clinton430
Hardin420
Shelby403
Fayette390
Wyandot382
Logan370
Fulton370
Coshocton370
Guernsey340
Defiance332
Preble331
Carroll303
Lawrence290
Holmes291
Brown281
Champaign271
Knox231
Highland221
Seneca202
Vinton192
Ashland190
Athens181
Perry181
Henry150
Scioto150
Jackson130
Paulding130
Harrison100
Adams81
Gallia71
Van Wert60
Pike60
Meigs60
Noble50
Morgan50
Unassigned00
Fort Wayne
Clear
72° wxIcon
Hi: 74° Lo: 52°
Feels Like: 72°
Angola
Scattered Clouds
70° wxIcon
Hi: 71° Lo: 50°
Feels Like: 70°
Huntington
Broken Clouds
72° wxIcon
Hi: 72° Lo: 52°
Feels Like: 72°
Decatur
Broken Clouds
70° wxIcon
Hi: 73° Lo: 52°
Feels Like: 70°
Van Wert
Broken Clouds
70° wxIcon
Hi: 72° Lo: 52°
Feels Like: 70°
Sunny & Pleasant Weekend
WFFT Radar
WFFT Temperatures
WFFT National

Community Events