Regarding Sicarii's broken decryption process, researchers said that "during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key."

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 8 months ago

"ransomware can't be decrypted" implies the ransomware itself can't be decrypted, ugh

  • source