VECT 2.0 RANSOMWARE BUG DESTROYS FILES INSTEAD OF ENCRYPTING

VECT 2.0 uses a flawed encryption implementation that fails to properly manage nonces—unique values required for secure encryption. When processing larger files, the ransomware's nonce handling breaks down, resulting in data destruction instead of the intended encryption. This defect creates an ironic outcome: victims lose their files permanently rather than facing a ransom recovery scenario. The malware's encryption mechanism becomes a data wiper, leaving no path to restoration even with a decryption key. Researchers warn that organizations remain vulnerable to infection despite the bug's destructive nature. The ransomware still spreads through standard attack vectors and affects systems before the encryption failure occurs. The flaw highlights how implementation errors in malware code can have unintended consequences. While the bug may reduce VECT 2.0's effectiveness as a ransomware tool, it increases the damage potential for targeted organizations.