Re:You’re infected—if you want to see your data again, pay u...
by abstractConcept on Thursday October 17, 2013 @08:09PM
(#6569030)
I would think their C&C server sets up a random Bitcoin wallet, and waits for a deposit, then allows the private key to be retrieved the next time CryptoLocker phones home.
http://shop.wikileaks.org/donate
Now, how the malware-writer goes about verifying payment is beyond my understanding...