知識

【】

字号+作者:囫圇吞棗網来源:熱點2025-04-04 00:46:57我要评论(0)

The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but

The ransomware WannaCry has infected hundreds of thousands of computer systems around the globe, but a security researcher claims he's figured out how to beat it.

In some cases, that is.

Adrien Guinet says that he was able to decrypt a ransomwared computer running Windows XP in his lab by discovering the prime numbers that make up the WannaCry private key. The private key is what a ransomware victim would need to buy off his attackers in order to regain access to his own files, but Guinet says he was able to do this without paying any Bitcoin ransom.

SEE ALSO:It won't be easy for WannaCry hackers to get their cash

Importantly, Guinet acknowledges this technique has only been demonstrated to work on a computer running Windows XP. Why does that matter? Despite initial reports, those systems were not affected by the major May 12 outbreak as the worm that spread the ransomware didn't hit those systems.

However, WannaCry itself doeswork on XP — suggesting that if the ransomware manages to spread to XP this new technique could be used to help future victims.

Mashable Light SpeedWant more out-of-this world tech, space and science stories?Sign up for Mashable's weekly Light Speed newsletter.By signing up you agree to our Terms of Use and Privacy Policy.Thanks for signing up!

There are some other provisos as well.

"In order to work, your computer must not have been rebooted after being infected," Guinet wrote on Github. "Please also note that you need some luck for this to work," he added, "and so it might not work in every cases!"

Why luck? As Guinet explains, when WannaCry infects a computer it generates encryption keys that rely on prime numbers. Here comes the important part: The ransomware "does not erase the prime numbers from memory before freeing the associated memory."

"If you are lucky (that is the associated memory hasn't been reallocated and erased)," continues Guinet, "these prime numbers might still be in memory."

If you can recover those prime numbers, as Guinet says he did, you can decrypt your files.

Guinet released the software he used to decrypt the infected system to the public. He calls it "Wannakey."

As mentioned above, Wannakey has not been tested on a large scale and so it may not be a silver bullet. It does, however, suggest that data considered lost in future ransomware attacks may actually be recoverable. And that is some much needed good news.


Featured Video For You
If this alarm clock doesn't get you out of bed nothing will

TopicsCybersecurityWindows

1.本站遵循行业规范,任何转载的稿件都会明确标注作者和来源;2.本站的原创文章,请转载时务必注明文章作者和来源,不尊重原创的行为我们将追究责任;3.作者投稿可能会经我们编辑修改或补充。

相关文章
  • Give your kitchen sponge a rest on this adorable bed

    Give your kitchen sponge a rest on this adorable bed

    2025-04-04 00:10

  • 【波盈足球】 世足不糾結爭議判罰 克羅埃西亞教頭為梅西獻上擁抱  ( 西亞,克羅 )

    【波盈足球】 世足不糾結爭議判罰 克羅埃西亞教頭為梅西獻上擁抱 ( 西亞,克羅 )

    2025-04-03 23:35

  • 世界杯小組賽第二輪比賽結束:已有3隊提前晉級16強,2隊提前出局(2018世界杯第二場比賽結果查詢)

    世界杯小組賽第二輪比賽結束:已有3隊提前晉級16強,2隊提前出局(2018世界杯第二場比賽結果查詢)

    2025-04-03 22:17

  • 【波盈足球】 世足「笨蛋看三小」梅西踢出火氣 賽後怒嗆荷蘭前鋒  ( 阿根廷,荷蘭 )

    【波盈足球】 世足「笨蛋看三小」梅西踢出火氣 賽後怒嗆荷蘭前鋒 ( 阿根廷,荷蘭 )

    2025-04-03 22:06

网友点评