Posteo turned off the email address that the notpetya authors were using for their victims to communicate with them... Hackers are often script kiddies that are not l33t at all. Join the light side instead! [fin] #BangBangCon

Or finally... what about appending the key to the end of each file? it's like taping the key to the padlock. "I hope they don't look in the basement" #BangBangCon

what about generating keys seeded with the date and the document root rather than actual randomness? well, it makes it easy to crack no matter how complicated your md5 and sha1 chains are... #BangBangCon

and using crypto apis is hard, so people... just use example code. what they didn't notice was that omitting CRYPT_VERIFYCONTEXT leaves persisted private keys around, rendering the entire scheme to extort useless! RTFM folks! #BangBangCon

There's a lot of copy-pasta and misuse of win32 apis... or it just crashes... exception handling is hard! #BangBangCon

Malware & ransomware owners love to leave messages for malware analysts or people who enter wrong passwords... it's like playing CoD against an 11 year old and reading chat... #BangBangCon

There's also ransom-encryption... (covered in @amirootyet's talk from #BangBangCon West)...

How about javascript monero miners that are cryptojacking your ALL cores? well, it's pretty obvious when your fan is running and system gets slow... so the user kills it. #BangBangCon

You can also set up a honeypot and keylog it and wait for someone to do something astonishingly stupid, like download Windows 2000 sp3 exe installers... or try to find /var/spool/samba without understanding filesystem hierarchies... #BangBangCon