Regarding Sicarii's broken decryption process, researchers said that "during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key."

you are viewing a single comment's thread
view the rest of the comments
[–] 84 points 9 months ago

I bet other ransomware creators hate this. If victims can’t even get their data back by paying, more victims will stop paying across the board.

  • source
  • parent