Apparently, just having a Russian keyboard defined, but not active, provides some defense. And this detection code is apparently in many ransomware packages, not just for this group.
I had this when doing some work for a company that worked in China. I had to use a Chinese android app, but because I can’t read it I infected my machine with all kinds of malware. The app even had 100k downloads so my guard wasn’t up. I think it was some chinese version of youtube I needed.
Apparently the malware kicked in because I didn’t have a chinese keyboard.
After that a chinese friend helped me install the right app and avoid some pitfalls.
Apparently the malware kicked in because I didn’t have a chinese keyboard.
After that a chinese friend helped me install the right app and avoid some pitfalls.