News for hackers. Stuff that matters.
Re:Understanding REvil: The Ransomware Gang Behind the Kasey... by tyingq on Thursday July 08, 2021 @09:11AM (#27771472)
Apparently, just having a Russian keyboard defined, but not active, provides some defense. And this detection code is apparently in many ransomware packages, not just for this group.
Re:Understanding REvil: The Ransomware Gang Behind the Kasey... by prox on Thursday July 08, 2021 @12:54PM (#27774683)
I had this when doing some work for a company that worked in China. I had to use a Chinese android app, but because I can’t read it I infected my machine with all kinds of malware. The app even had 100k downloads so my guard wasn’t up. I think it was some chinese version of youtube I needed.

Apparently the malware kicked in because I didn’t have a chinese keyboard.

After that a chinese friend helped me install the right app and avoid some pitfalls.