In an unusual turn of events, a Windows bug has been found to work in favor of victims instead of attackers, allowing WannaCry victims that run Windows XP to decrypt the files encrypted by the ransomware.
The fact was discovered by Adrien Guinet, a researcher with security firm QuarksLab, who also created software that should help victims to recover the prime numbers of the RSA private key used by WannaCry.
But the software works only on Windows XP machines, only on computers that haven’t been rebooted after infection, and only if the computer’s memory hasn’t been reallocated and erased.
