时间:2026-07-07 19:08:44 来源:网络整理编辑:時尚
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
WhatsApp announces plans to share user data with Facebook2026-07-07 18:45
She threw her poop out the window. Then her Tinder date really went off the rails.2026-07-07 18:27
Trump's DACA decision is a double whammy for hurricane survivors2026-07-07 18:08
This dating app has figured out that where you went to school really does matter2026-07-07 17:58
17 questions you can answer if you're a good communicator2026-07-07 17:44
Very bad summer at the box office ends with a very, very bad Labor Day2026-07-07 17:28
Equifax hack reminds everyone how much they hate credit agencies2026-07-07 17:26
The Boston Red Sox used Apple Watches to cheat against the Yankees, report says2026-07-07 16:54
Tributes flow after death of former Singapore president S.R. Nathan2026-07-07 16:37
Don't fall for these fake Facebook videos of Hurricane Irma, like millions of other people did2026-07-07 16:36
Watch MTV's Video Music Awards 2016 livestream2026-07-07 18:59
No, John Boyega didn't react to the 'Star Wars' director news with a bunch of emoji2026-07-07 18:57
'Game of Thrones' High Sparrow will play his popelganger Pope Francis in a Netflix film2026-07-07 18:37
Frightening satellite view of Hurricane Irma swallowing tiny islands2026-07-07 18:33
5 people Tim Cook calls for advice on running the biggest company in the world2026-07-07 18:07
Man attempts to hide from TV camera, fails spectacularly2026-07-07 17:41
This dating app has figured out that where you went to school really does matter2026-07-07 17:11
Hurricane Irma's forecasted to hit Mar2026-07-07 16:56
Pokémon Go is so big that it has its own VR porn parody now2026-07-07 16:53
This dating app has figured out that where you went to school really does matter2026-07-07 16:35