WannaCry in-memory key recovery for Windows XP
The attackers seem to have a poor grasp on cryptography. The entire point of RSA is that they don't have to generate the key locally. Just ship your ransomware with the attacker's public key, generate a symmetric key K locally, encrypt the data with K, encrypt K with the public key, offer to decrypt K for a ransom.There seems to be an inverse correlation between smart and evil in human beings which is reassuring, but only mildly.