Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

krebsonsecurity.com

Post reply on HN
Print view View original

21–30 of 229 posts

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#21

Post by NoOn3 »

throwaway48476 wrote: post #3
pogue wrote: post #2

I wonder if this is still actually the case after Brian Krebs announced it to the world in 2021.

It has always been this way and will continue to be. Russia along with north korea consider ransomware to be legitimate economic activity. It's part of their hybrid warfare strategy.

I don't think this is done on purpose at the state level in Russia or China, It's just that sometimes government don't pay attention to those who do it if this is done in relation to somehow unfriendly countries. But the US also uses hacking for hostile purposes. For example, Stuxnet and some other cases. Yes, it's not ransomware, but the difference is not that huge. Western-backed countries like Ukraine are also doing the same. Anyway Just use Linux and you'll be fine for a while.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#23

Post by sdoering »

floundy wrote: post #17
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Every couple of years I give daily driving Linux a try. I still find that old joke about "Linux is only free if your time is worth nothing" to be quite apt.

I switched to Ubuntu "skinned" with Omakub a few months ago. Never looked back. Work with Windows on my work machine and use my *nix box as my daily dev driver and machine for surfing the net, doing emails and documents. I actually use it for nearly everything except vector graphics/dtp & images, as I am still too used to the affinity suite.

Will try out Omarchy just for the fun of it - not that I expect it to become my daily driver.

But - depending on your needs - I think Linux can be on par (for me it is way better, longer battery life, better configuration, better tools, smoother workflows, but YMMV).

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#24

Post by pkulak »

floundy wrote: post #17
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Every couple of years I give daily driving Linux a try. I still find that old joke about "Linux is only free if your time is worth nothing" to be quite apt.

Do you mind elaborating a bit on what went wrong? Like, were you installing on a recent MacBook, or something else not well supported? In my experience, installing and running a popular distro is absolute cake. Easier than Windows, even, since you aren’t forced to create cloud accounts and answer a million privacy questions; you basically install then boot right into your new desktop.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#25

Post by EvanAnderson »

Phurist wrote: post #14
Melatonic wrote: post #13

The best anti malware on any version of windows has always been to make your default account you use everyday a non admin account. You also need to create a separate account (can just be a local account) that is a full administrator. Make sure you use a different password. Anytime you need to install something or run powershell/CMD as admin it will popup and ask for the separate login of the admin account. This is ba…

Or you know... just use Linux

There's nothing magical about the Linux security architecture, when it comes to malware, aside from abysmal Linux market share. If it were popular it would be targeted.

That's not to say there's no value. It's a case of security by obscurity, at best. The Unix security model is much more simplistic than Windows NT. Everybody disables SELinux so there's no meaningful capabilities functionality.

Assuming you actually do run malware, all your user account's data on a Linux machine ends up being just as vulnerable to exfil or ransom as if you're running Windows as a limited user.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#26

Post by NoOn3 »

floundy wrote: post #17
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Every couple of years I give daily driving Linux a try. I still find that old joke about "Linux is only free if your time is worth nothing" to be quite apt.

But if this is your first time using Windows or Mac, you will also need time to get used to it. I've tried using a Mac, and so far I'm not used to it. :)

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#27

Post by johanneskanybal »

Phurist wrote: post #14
Melatonic wrote: post #13

The best anti malware on any version of windows has always been to make your default account you use everyday a non admin account. You also need to create a separate account (can just be a local account) that is a full administrator. Make sure you use a different password. Anytime you need to install something or run powershell/CMD as admin it will popup and ask for the separate login of the admin account. This is ba…

Or you know... just use Linux

Right tool for the job. Linux for deploying stuff to, Linux or mac for working on the stuff you’ll deploy. Windows for games and everyday use. They’re all superior in their category and it’s too obvious to spend time arguing about.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#28

Post by fredfish »

floundy wrote: post #17
Phurist wrote: post #14

Earlier quoted context omitted.

Or you know... just use Linux

Every couple of years I give daily driving Linux a try. I still find that old joke about "Linux is only free if your time is worth nothing" to be quite apt.

Every few years someone forces me to use Windows and I find that my data is apparently worth nothing since it being one giant anti-pattern wastes my time.

Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

#29

Post by EvanAnderson »

noisem4ker wrote: post #15
Melatonic wrote: post #13

The best anti malware on any version of windows has always been to make your default account you use everyday a non admin account. You also need to create a separate account (can just be a local account) that is a full administrator. Make sure you use a different password. Anytime you need to install something or run powershell/CMD as admin it will popup and ask for the separate login of the admin account. This is ba…

It sounds like you just described what User Account Control (UAC) has been doing since Windows Vista (2006).

There are UAC bypasses. Microsoft has repeatedly stated that UAC isn't actually a security boundary. It's better to run a daily driver account as a limited user and only elevate when you overtly need it. (It's even better to use a separate login, as opposed to "Run As...)
Post reply on HN