时间:2025-11-22 03:20:32 来源:网络整理编辑:時尚
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but
The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.
In some cases, that is.
Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.
SEE ALSO:It won't be easy for WannaCry hackers to get their cashImportantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.
However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.
Tweet may have been deleted
There are some other provisos as well.
"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"
Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."
"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."
If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.
Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."
As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.
TopicsCybersecurityWindows
Carlos Beltran made a very interesting hair choice2025-11-22 02:50
索帥 :C羅不會參加每場比賽 渣叔別再說曼聯點球多2025-11-22 02:39
國米前瞻 :“真假”藍黑軍大比拚 哲科PK薩帕塔2025-11-22 02:39
英媒:36年禁酒令或解除 英國球迷將能邊喝酒邊看球2025-11-22 02:34
You can now play 'Solitaire' and 'Tic2025-11-22 02:21
全運女足決賽水慶霞左右互搏 國家隊主帥人選揭曉在即2025-11-22 02:14
7場5球!羅馬4000萬標王不負眾望 穆裏尼奧慧眼識珠2025-11-22 02:01
利物浦前瞻 :薩拉赫衝紅軍英超百球 馬內欲比肩德羅巴2025-11-22 01:34
Daughter gives her 1002025-11-22 01:28
廣場舞老人砸鎖占球場跳舞 小學生球賽被迫中止(GIF)2025-11-22 01:07
Mall builds real2025-11-22 03:08
7場5球 !羅馬4000萬標王不負眾望 穆裏尼奧慧眼識珠2025-11-22 03:03
切爾西VS曼城身價 :總和近20億歐 比利時雙星破億2025-11-22 02:34
尷尬!拜仁接觸呂迪格經紀人 但他隻想和藍軍續約2025-11-22 02:07
The U.S. will no longer have the final say on internet domain names2025-11-22 02:05
李佳悅:32歲仍在堅持 隻為證明是中國女足最強中後衛2025-11-22 02:04
巴薩被裁判坑死!德容冤枉染紅 名哨:這都不是犯規2025-11-22 01:52
西甲主席:已邀請巴黎 以解釋為何他們違反財政公平2025-11-22 01:24
Dog elected for third term as mayor of Minnesota town2025-11-22 00:50
西甲主席:已邀請巴黎 以解釋為何他們違反財政公平2025-11-22 00:49