In my experience, most malware creators are pretty terrible. Even in 2015 it's common for malware to communicate with C&C servers that have classic SQL injectio

In my experience, most malware creators are pretty terrible. Even in 2015 it's common for malware to communicate with C&C servers that have classic SQL injection vulnerabilities. More specifically on the topic of ransomware, have a look at this gem [1], which uses RSA, but the key is 128 ASCII digits. Very similar to the cryptocat disaster. [2] [1] http://blog.cassidiancybersecurity.com/post/2014/02/Bitcrypt-broken http://blog.cassidiancybersecurity.com/post/2014/02/Bitcrypt... [2] http://tobtu.com/decryptocat.php http://tobtu.com/decryptocat.php