267

Regarding Sicarii's broken decryption process, researchers said that "during execution, the malware regenerates a new RSA key pair locally, uses the newly generated key material for encryption, and then discards the private key."

all 18 comments
sorted by: hot top new old
[-] ElBarto@piefed.social 146 points 8 months ago

Ransomware that can't be decrypted is just destructive malware like any other.

[-] SmoothLiquidation@lemmy.world 91 points 8 months ago

I bet other ransomware creators hate this. If victims can’t even get their data back by paying, more victims will stop paying across the board.

[-] 30p87@feddit.org 111 points 8 months ago
[-] MotoAsh@piefed.social 40 points 8 months ago

rofl of course...

[-] DrunkAnRoot@sh.itjust.works 40 points 8 months ago

vibe coded and ranswomare in the same sentence was not on my 2026 bingo card

[-] gustofwind@lemmy.world 14 points 8 months ago

we need a way bigger bingo card

[-] DarkCloud@lemmy.world 39 points 8 months ago

Like a virus that kills the host, it won't spread as well and should die out faster than other types of maleware.

[-] anton@lemmy.blahaj.zone 35 points 8 months ago

Hebrew-based content appears machine-translated

Did they vibe code their false identity as well?

[-] OnfireNFS@lemmy.world 14 points 8 months ago

So they basically created a hashing function?

[-] pivot_root@lemmy.world 59 points 8 months ago

A hash is at least consistent when given identical inputs. What they created is more like a digital incinerator.

[-] Jayjader@jlai.lu 8 points 8 months ago
[-] anton@lemmy.blahaj.zone 7 points 8 months ago

-u would give you the space back.
The ransomware doesn't. There is a block of data, sitting there, taunting you.

[-] Jayjader@jlai.lu 3 points 8 months ago

ehehehehe thanks for that mental image

Of course, one can always reclaim that space if the data truly is inaccessible. Makes me want to write a joke program for "cleaning up" after ransomware that just removes the data from the partition table (or whatever the equivalent for files is - would that just be rm?)

[-] NotMyOldRedditName@lemmy.world 9 points 8 months ago

Brilliant lol.

[-] rain_worl@lemmy.world 0 points 7 months ago

"ransomware can't be decrypted" implies the ransomware itself can't be decrypted, ugh

this post was submitted on 28 Jan 2026
267 points (99.6% liked)

Programmer Humor

33385 readers
1345 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 3 years ago
MODERATORS