For larger files, the malware generates four of these codes. But due to a programming error, it keeps overwriting each new code with the previous one in the same slot, like writing four different combinations on a single sticky note and keeping only the last one. By the time it’s done, three of the four codes are gone forever. The scrambled data they correspond to is permanently unreadable for the victim, security researchers, and the attackers themselves.

  • vagrancyand@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    61
    ·
    edit-2
    11 hours ago

    They called me crazy for insisting on ensuring all of our companies files compress to 10,000 separate 64KiB xz compressed files. Well who’s laughing now?!

    • JasonDJ@lemmy.zip
      link
      fedilink
      English
      arrow-up
      16
      ·
      1 day ago

      Best part about doing this is you can get 4 files to a DD 5.25". That, alone, quadruples the speed of performing off-site backups.

    • NekoKoneko@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 day ago

      When their alpha testers are already ransomware victims, I suppose they figure what’s the harm?