Regarding Sicarii’s broken decryption process, researchers said that “during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key.”

  • SmoothLiquidation@lemmy.world
    link
    fedilink
    English
    arrow-up
    55
    ·
    17 hours ago

    I bet other ransomware creators hate this. If victims can’t even get their data back by paying, more victims will stop paying across the board.