Fabian Wosar on Twitter: "Some researchers are propagating, that since a large number of victims hit during the REvil Kaseya attack were hit with the same public key, only one victim paying the ransom will be enough to decrypt all victims. Let's talk about that."

You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more

By embedding Twitter content in your website or app, you are agreeing to the Twitter Developer Agreement and Developer Policy.

The fastest way to share someone else’s Tweet with your followers is with a Retweet. Tap the icon to send it instantly.

Some researchers are propagating, that since a large number of victims hit during the REvil Kaseya attack were hit with the same public key, only one victim paying the ransom will be enough to decrypt all victims. Let's talk about that.

REvil is one of the few ransomware families that actually thought about their cryptographic scheme and how to account for various situations. In fact, during an interview, they specifically mentioned how proud they are of it. You'll see why.

In general, there are four types of public and private key pairs involved with REvil: There is an operator key pair, with the public part of it being hardcoded into every single REvil sample we have ever seen.

Leave a Comment