Thái | Hacker | Kỹ sư tin tặc • 0 implied HN points • 18 May 17
- A simple idea was implemented to find decryption keys in memory, useful for recovering WannaCry-encrypted data without paying ransom.
- Decryption keys might still be accessible in memory on Windows XP machines infected with WannaCry that haven't been shut down since the infection occurred.
- If unable to recover decryption keys from memory, the alternative is to pay ransom in Bitcoin, negotiate with the attackers, or seek help to purchase Bitcoin for ransom payment.