时间:2024-09-20 07:59:25 来源:网络整理编辑:知識
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
There's a big piece of fake chicken stuck to this phone case2024-09-20 07:56
用多大勁?小球迷被C羅打出淤傷 其母 :無禮的道歉2024-09-20 07:41
曝卡塔爾財團世界杯後出售巴黎 已放棄續約姆巴佩2024-09-20 07:28
韓喬生點評郭田雨首秀:中國球員需要提高的就是這種態度2024-09-20 07:22
17 questions you can answer if you're a good communicator2024-09-20 07:06
京媒 :武磊郭田雨讓處於低穀的中國足球看到微光2024-09-20 07:03
亞足聯官方:上海海港退出2022亞冠聯賽2024-09-20 06:50
中國青年報:中超“風險”史無前例 能湊齊18隊參賽已不易2024-09-20 06:40
Balloon fanatic Tim Kaine is also, of course, very good at harmonica2024-09-20 06:39
上海海港官方 :向亞足聯 海港球迷和社會各界表達誠摯歉意2024-09-20 05:29
The Weeknd teases new music in Instagram post2024-09-20 07:31
真十一羅漢 !反綁阿科爾裸身跪地 盜皇冠秒送出國2024-09-20 07:18
中國青年報:中超“風險”史無前例 能湊齊18隊參賽已不易2024-09-20 06:44
中國青年報:中超“風險”史無前例 能湊齊18隊參賽已不易2024-09-20 06:22
Slack goes down again, prompting anxiety everywhere2024-09-20 06:07
曝越南梅西有望加盟J聯賽頂級豪門 已收到轉會談判邀約2024-09-20 06:01
C羅失控名場麵 :扇對手大嘴巴 伐倒對手後連續鞭屍2024-09-20 05:52
隊記 :C羅該找醫生做個心理檢查 曼聯因他搖搖欲墜2024-09-20 05:42
Twitter grants everyone access to quality filter for tweet notifications2024-09-20 05:37
前國安外援8戰6球領跑J1聯賽 或連續4年進球20+2024-09-20 05:18