News for hackers. Stuff that matters.

A comment on Massachusetts Steamship Authority hit by ransomware attack; ferries delayed. Parent comment

Re:Massachusetts Steamship Authority hit by ransomware attac... by rdtsc on Wednesday June 02, 2021 @11:37PM (#27376973)
> but Russia enables the operation to not worry about consequences (a lot of ransomware will disable itself on Russian computers to avoid local prosecution).

I remember reading how supposedly adding a Russian or a few other keyboard layouts might fool some of the malware to ignore the machine [1].

I guess one idea for the Western intel agencies could be to play off of that, and somehow disable that check (infect their malware) such that it can and does attack the Russian infrastructure.

[1] https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...

[ Parent | on HN ]
Re:Massachusetts Steamship Authority hit by ransomware attac... by svenfaw on Thursday June 03, 2021 @04:17AM (#27378475)
If they could do that they might just as well disable the file-encrypting part.
[ Parent | on HN ]
Re:Massachusetts Steamship Authority hit by ransomware attac... by rdtsc on Thursday June 03, 2021 @01:38PM (#27384741)
If the goal is to put them the crosshairs of their own government's law enforcement. However, that said, in those parts the line between law enforcement and criminal organization is pretty gray and fluid.
[ Parent | on HN ]