时间:2025-06-17 14:01:19 来源:网络整理编辑:焦點
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
The U.S. will no longer have the final say on internet domain names2025-06-17 13:41
國足客戰日本隊將遭遇苦主裁判 多位國腳均曾被其罰下2025-06-17 13:03
央視關注女足亞洲杯 水慶霞 :開局可能出現問題但要相信自己2025-06-17 13:03
西超杯決賽首發 :本澤馬搭巴西雙星 阿森西奧傷缺2025-06-17 12:57
Carlos Beltran made a very interesting hair choice2025-06-17 12:25
馬德興:有球員12強賽比賽前連去7次衛生間 沒經曆過腿都會抖2025-06-17 12:13
哈蘭德雙響!77戰轟78球 賽後懟多特 :他們在逼我2025-06-17 11:57
皇馬前瞻 :銀河戰艦衝擊賽季首冠 本澤馬超越C羅?2025-06-17 11:52
U.S. government issues warning on McDonald's recalled wearable devices2025-06-17 11:34
圖赫爾不滿盧卡庫錯失單刀 輕易丟失球權是大問題2025-06-17 11:15
Plane makes emergency landing after engine rips apart during flight2025-06-17 13:56
國足上海集訓人員基本到齊 年輕球員多朝氣十足2025-06-17 13:54
本澤馬再扮殺手 !一數據超C羅 皇馬生涯點球全中2025-06-17 13:48
國米VS亞特蘭大首發:哲科桑切斯領鋒線 恰20登場2025-06-17 13:26
Tesla's rumored P100D could make Ludicrous mode even more Ludicrous2025-06-17 12:42
巴薩中衛4引援對象曝光:全部0身價 攢錢買哈蘭德2025-06-17 12:23
官方 :莫雷諾正式回歸加盟哥倫比亞國民競技俱樂部2025-06-17 12:02
詹俊:曼城全場幾乎無任何漏洞 英超爭冠懸念不大了2025-06-17 11:48
Hiddleswift finally followed each other on Instagram after 3 excruciating days2025-06-17 11:37
這待遇!拉莫斯觸球即獲歡呼 最強體巴黎戰皇馬?2025-06-17 11:22