No one will have been able to escape the media coverage given to WannaCrypt as it ripped through the out-of-date / aging infrastructure many companies foolishly still employ to this day, the most talked about here in the UK being none other than the NHS of course.
A security researcher called Adrien Guinet has found a way to dump decryption keys from the memory of an infected machine, which can then be used to decrypt the files previously thought lost, on infected computers. Further more he’s put together a handy little tool called “Wannakey” which is available to download here: https://github.com/aguinet/wannakey
Unfortunately limitations apply, Compromised machines must not have been rebooted in order for this to work. We remain sceptical as to whether there are any infected machines still in this state, but a nice find none the less.
