ransom ware worm

I read an article today that says a 22-year-old security analyst essentially mitigated the attack on Friday. He discovered that if the ransomware could not connect to its command and control host, that it would lock the PC. If it does connect, then the ransomware terminated itself. He also found that the domain for the command and control site was for sale. He bought it. Once the infected computers were able to connect to his newly-purchased domain the ransomware shut down.