Though the funds all the time got here to the trade by way of middleman wallets, Chainalysis discovered situations through which the pockets receiving ransomware proceeds despatched funds on to the mining pool pockets, which then despatched the cash to the trade. This may imply that each the ransomware- and mining-related wallets belong to the identical proprietor, who’s utilizing mining as a technique to launder felony funds, Chainalysis wrote.