258
Vibe-Coded 'Sicarii' Ransomware Can't Be Decrypted (www.darkreading.com)
submitted 9 months ago by to c/programmer_humor@programming.dev
17 comments fedilink hide all child comments
 

Regarding Sicarii's broken decryption process, researchers said that "during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key."

you are viewing a single comment's thread
view the rest of the comments
[–] 56 points 9 months ago (3 children)

A hash is at least consistent when given identical inputs. What they created is more like a digital incinerator.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 8 points 9 months ago (2 children)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 9 months ago (1 child)

    -u would give you the space back.
    The ransomware doesn't. There is a block of data, sitting there, taunting you.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 9 months ago

    ehehehehe thanks for that mental image

    Of course, one can always reclaim that space if the data truly is inaccessible. Makes me want to write a joke program for "cleaning up" after ransomware that just removes the data from the partition table (or whatever the equivalent for files is - would that just be rm?)

  • permalink
  • fedilink
  • source
  • parent