5 ms·
Earlier reports I'd heard said that this group was unprepared or poorly prepared to handle the incoming ransom. Many of these ransomware campaigns use a fully
by wyldfire 10y ago
Earlier reports I'd heard said that this group was unprepared or poorly prepared to handle the incoming ransom. Many of these ransomware campaigns use a fully automated mechanism to deliver keys upon payment, this group did not.
- koolba 10y agoHow does that work in practice? Do the decryption keys get stored in the block chain as well or out of band?
- pas 10y agoout-of-band, probably sent via email or managed through the "malware app" itself.
- j_s 9y agoOne of the main pain points was using the same Bitcoin address as a destination rather than unique-per-victim... it gets confusing to prove who paid.