时间:2025-09-17 05:37:39 来源:网络整理编辑:焦點
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
This app is giving streaming TV news a second try2025-09-17 05:37
足協對戰越南扭轉頹勢充滿期待 國足做好苦練準備2025-09-17 05:35
AC米蘭VS拉齊奧首發:雷比奇迪亞斯先發 伊布替補2025-09-17 05:21
保障旅歐球員日足協做了啥?比甲建跳板 將在德設立基地2025-09-17 05:00
Fyvush Finkel, Emmy winner for 'Picket Fences,' dies at 932025-09-17 04:52
登貝萊將留隊征戰足協杯 湊齊四外援廣州城有想法?2025-09-17 04:25
急召費南多?國足未回應 目前陣容同樣可走出低穀2025-09-17 04:14
不愧是你 !巴舒亞伊被動屁股破門 遭射中臀部反彈2025-09-17 03:39
Nate Parker is finally thinking about the woman who accused him of rape2025-09-17 03:35
傷病猛如虎 !萊萬領銜拜仁3將或缺席歐冠戰巴薩2025-09-17 03:00
Two astronauts just installed a new parking spot on the International Space Station2025-09-17 05:31
廣州城外援卡爾多納結束休假 曬機場照即將回中國2025-09-17 05:29
完美裏程碑 !穆裏尼奧執教生涯達1000場 勝率達63.8%2025-09-17 05:22
阿森納VS諾維奇首發:富安健洋先發 本2025-09-17 05:05
Nate Parker is finally thinking about the woman who accused him of rape2025-09-17 05:04
尤文新賽季三輪不勝!52年第二次發生 全是囧叔造2025-09-17 04:45
精彩 !國米桑普互飆世界波 暴力美學讓人欲罷不能2025-09-17 03:31
英媒:C羅回歸首秀最高時速為32.5KM 位居英超第二2025-09-17 03:26
MashReads Podcast: What makes a good summer read?2025-09-17 03:16
國足開局不順在足協高層意料之中 保障力度繼續加大2025-09-17 03:06