Ransomware patches decryption flaw

By on
Ransomware patches decryption flaw

The creators of the DMA Locker ransomware released an updated version that now includes a patch to fix a flaw that left earlier iterations easily decryptable.

The ransomware's third version now includes an RSA key and key validation, a researcher called Hasherezade said in a Tuesday Malwarebytes blog post. “This time the key necessary to decrypt files must be supplied not as a text, but as RSA key file,” the researcher explained. 

“The author of this malware, despite appearing inexperienced in programming, seems to be very determined to gradually improve the quality of the product,” said Hasherezade wrote.

In addition to addressing the decryption flaw, coding in the previous versions was so shoddy that the malware would sometimes crash a computer before the victim received a ransom demand. It is unclear if that problem persists in the latest iteration of DMA Locker.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Log in

Email:
Password:
  |  Forgot your password?
By using our site you accept that we use and share cookies and similar technologies to perform analytics and provide content and ads tailored to your interests. By continuing to use our site, you consent to this. Please see our Cookie Policy for more information.