Vibe-Coded 'Sicarii' Ransomware Can't Be Decrypted
ID: 9f43e3a5-d19f-5b5a-9def-d8bf6e22466f
STIX ID: report--9f43e3a5-d19f-5b5a-9def-d8bf6e22466f
Feed Name: Dark Reading
Threat Score
Researchers warn that Sicarii, a newly observed ransomware-as-a-service, contains a per-execution RSA key-generation bug that discards private keys and prevents decryption even after payment; the group appears inexperienced and possibly used AI-assisted tooling, has claimed a small number of victims, and victims are advised not to pay and to pursue backups, isolation, forensic preservation, and professional incident response.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
