Ransomware-Bitcoin Threat Intelligence Sharing Using Structured Threat Information Expression

Abstract

To address the challenge of representing ransomware-cryptocurrency payments, this article outlines a novel approach to the extraction and sharing of threat intelligence data from the Bitcoin blockchain. This work results in the creation of two new cyber-observable objects, x-cryptocurrency-address, and x-cryptocurrency-transaction.