时间:2025-10-21 13:23:06 来源:网络整理编辑:焦點
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
Slack goes down again, prompting anxiety everywhere2025-10-21 13:19
重慶隊官方發文疑回應停訓:願你我依舊洶湧 ,依然熱愛2025-10-21 12:53
葡萄牙VS塞爾維亞首發:C羅若塔B席出戰 B費替補2025-10-21 12:16
記者:女足新帥預計最快下周公布 或是A big name ?2025-10-21 12:11
Olympic security asks female Iranian fan to drop protest sign2025-10-21 12:06
黃健翔吐槽李鐵:甩鍋聯賽從不擔責 一對比賈秀全太爺們了2025-10-21 11:38
國足工作核心鎖定正確看待外界評論 拒絕崩盤搶分目標不變2025-10-21 11:24
曝穆帥挖角老東家曼聯補強 先租後買簽紅魔飛翼2025-10-21 11:17
J.K. Rowling makes 'Harry Potter' joke about Olympics event2025-10-21 11:01
西班牙VS瑞典前瞻 :小組榜首大戰 伊布誓帶隊逆襲2025-10-21 10:38
Singapore rolls out video2025-10-21 12:28
挖前東家!記者:帕拉蒂奇有意為熱刺引進麥肯尼2025-10-21 12:03
意大利前瞻 :狂勝確保進世界杯 鋒無力需英雄現身2025-10-21 11:56
西班牙VS瑞典前瞻:小組榜首大戰 伊布誓帶隊逆襲2025-10-21 11:18
Olympian celebrates by ordering an intimidating amount of McDonald's2025-10-21 11:17
西班牙VS瑞典前瞻:小組榜首大戰 伊布誓帶隊逆襲2025-10-21 11:15
長記性 !米蘭欲提前續約四大肱骨 避免再生慘劇2025-10-21 11:11
西班牙VS瑞典前瞻:小組榜首大戰 伊布誓帶隊逆襲2025-10-21 11:01
Satisfy your Olympics withdrawals with Nike's latest app2025-10-21 10:45
英媒:巴薩死活想買斯特林 但他們掏不起這個錢2025-10-21 10:39