Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
1–10 of 229 posts
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#2I wonder if this is still actually the case after Brian Krebs announced it to the world in 2021.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#3I wonder if this is still actually the case after Brian Krebs announced it to the world in 2021.
It has always been this way and will continue to be. Russia along with north korea consider ransomware to be legitimate economic activity. It's part of their hybrid warfare strategy.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#4If you make your machine look like a malware execution sandbox, a lot of malware will terminate to avoid being analyzed. This is just part of the cat and mouse game.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#52021
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#6I wonder if this is still actually the case after Brian Krebs announced it to the world in 2021.
It has always been this way and will continue to be. Russia along with north korea consider ransomware to be legitimate economic activity. It's part of their hybrid warfare strategy.
That doesn't really say much about the specific behavior of using a russian keyboard as a signal.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#7If you make your machine look like a malware execution sandbox, a lot of malware will terminate to avoid being analyzed. This is just part of the cat and mouse game.
Put VirtualBox strings in your firmware :)
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#82021
I wonder if Ukraine has been removed from the exclusion list since then. A quick Google search says that the keyboards layouts are different from Russian keyboards.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#9Earlier quoted context omitted.
It has always been this way and will continue to be. Russia along with north korea consider ransomware to be legitimate economic activity. It's part of their hybrid warfare strategy.
That doesn't really say much about the specific behavior of using a russian keyboard as a signal.
Well yeah, because that's not what the person they were replying to was asking about. They were asking a "when" question of sorts, tangential to the root topic, not a why.
Re: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)
#10Earlier quoted context omitted.
It has always been this way and will continue to be. Russia along with north korea consider ransomware to be legitimate economic activity. It's part of their hybrid warfare strategy.
That doesn't really say much about the specific behavior of using a russian keyboard as a signal.
It is a fail-fast strategy to avoid internal prosecution for accidental attacks on fellow citizens.