时间:2026-05-23 17:52:28 来源:网络整理编辑:時尚
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
Donald Trump's tangled web of Russian influence2026-05-23 17:39
唐佳麗18日淩晨到隊 中國女足亞洲杯23名參賽球員聚齊2026-05-23 17:38
亞冠分組解析 :海港上上簽 多因素影響中超Big42026-05-23 17:37
FSU vs. UNC basketball livestream: Game time, streaming deals2026-05-23 16:59
Samsung Galaxy Note7 teardown reveals the magic behind the phone's iris scanner2026-05-23 16:32
續約有轉機?迪巴拉這次破門後笑了 沒再怒視高層2026-05-23 16:32
吳曦FIFA年度最佳投票順序 :球員先選若鳥 主帥曼奇尼第一2026-05-23 15:41
埃裏克森冬窗重返熱刺? 英媒:前緣已斷難再續!2026-05-23 15:33
Donald Trump's tangled web of Russian influence2026-05-23 15:13
越南女足又一人中招 或被取消亞洲杯參賽資格2026-05-23 15:12
Carlos Beltran made a very interesting hair choice2026-05-23 17:33
李鐵投票明細:世界足球先生首選萊萬 最佳主帥先選圖赫爾2026-05-23 17:18
日韓周報:南野進球奧川雅也連場破門 久保圓月彎刀2026-05-23 16:59
尤文前瞻:斑馬連續16次進8強? 誇利亞雷拉戰舊主2026-05-23 16:37
This coloring book is here for all your relationship goals2026-05-23 16:14
實至名歸!萊萬榮膺2021年世界足球先生2026-05-23 15:56
國米前瞻 :藍黑15年不敗晉級無懸念 小因延續全勝2026-05-23 15:51
亞冠小組賽賽程 :山東次輪打浦和 廣州隊或背靠背戰蔚山2026-05-23 15:34
This weird squid looks like it has googly eyes, guys2026-05-23 15:10
投票一覽:萊萬薩拉赫第二選梅西 梅西選票無他倆2026-05-23 15:06