[flerchin]

Krebs said that some malware checks for a cyrillic keyboard to try and geo target outside of the country of operation. This seems to be the same type of thing.

https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...

[vntok]

Other malware check for a cyrillic keyboard to try and geo target inside of the country of opération.