New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Wannacry The Hacker News published an article on a workaround (with limitations).
Hello,
The website The Hacker News has published an article on a way to unlock encrypted files.
The computer must have not been rebooted.
Memory must have not been overwritten.
http://thehackernews.com/2017/05/wannacry-ransomware-decryption-tool.html
Comments
Fixed it for you
That's some shady blog trying to phish on the name of "the hacker news". Loving their original research...
https://github.com/aguinet/wannakey - the decryption tool's repo
@dimitrisp fixed, thanks !
Wow this is some elite stuff!
Thanks for sharing.
This works because windows doesnt zero or write random data over the crypto memory right? So it has a limited time for effective use most likely.
That being said it's really neat that a vulnerability in windows can be used to fix a pesky cryptolocker spread with via a different vulnerability.
we had 2 windows vps corupted , once is unbloked and the second was not work. At lease i have one client with this data recuperated. The other one ... crying
Only XP. Nothing later.
The function used is also clearly documented to not work on XP.
This other tool seems to work very rarely by the code not using any erase function at all.