Meaning the attacker returns the stolen data before the transaction is confirmed in the blockchain? Nice move, morons… lol
No no, I mean if the victim could broadcast another tx with the original utxo but with a higher fee, so miners will look for that transaction instead of the earlier one, and that way the funds can be kept by the victim, and still the ransomware unlock the data. I do not know if this is possible. That is what I want to know.
reply
You can broadcast a replacement transaction directly to a miner if you know their IP address.
Whether any mining pools would consider that transaction, I've no idea. The standard bitcoin core client would reject the transaction (i.e., not add it to the mempool) since it would be considered invalid it includes one or more UTXOs that have already been spent.
And the fee for that replacement transaction, to be sufficient incentive for a miner/pool to consider it, would need to be at least as much as the next upcoming block could be. So ... currently 6.25 BTC + possible fees that would be mined.
And how does invalidating a transaction with just one confirmation and mining of a replacement transaction help you? Most exchanges and such are a minimum of 3 confirmations, no?
reply
Yes, thanks. Indeed 3 or more confirmations are required. Maybe after 5 more halvings (0,19 btc of subsidy) that strategy could be affordable.
reply