Regarding Sicarii's broken decryption process, researchers said that "during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key."

you are viewing a single comment's thread
view the rest of the comments
[–] 141 points 9 months ago (1 child)

Ransomware that can't be decrypted is just destructive malware like any other.

  • source
  • hideshow 1 child comment