logo

Vibe-Coded 'Sicarii' Ransomware Can't Be Decrypted

ID: 9f43e3a5-d19f-5b5a-9def-d8bf6e22466f

STIX ID: report--9f43e3a5-d19f-5b5a-9def-d8bf6e22466f

Feed Name: Dark Reading

Threat Score
65/100

Date Published: 2026-01-27

Date Updated: 2026-04-21

Author: Alexander Culafi

...
...

Researchers warn that Sicarii, a newly observed ransomware-as-a-service, contains a per-execution RSA key-generation bug that discards private keys and prevents decryption even after payment; the group appears inexperienced and possibly used AI-assisted tooling, has claimed a small number of victims, and victims are advised not to pay and to pursue backups, isolation, forensic preservation, and professional incident response.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.