Re:Understanding REvil: The Ransomware Gang Behind the Kasey...
by tyingq on Thursday July 08, 2021 @09:11AM
(#27771472)
Apparently, just having a Russian keyboard defined, but not active, provides some defense. And this detection code is apparently in many ransomware packages, not just for this group.
[ Parent
| on HN ]
Re:Understanding REvil: The Ransomware Gang Behind the Kasey...
by prox on Thursday July 08, 2021 @12:54PM
(#27774683)
I had this when doing some work for a company that worked in China. I had to use a Chinese android app, but because I can’t read it I infected my machine with all kinds of malware. The app even had 100k downloads so my guard wasn’t up. I think it was some chinese version of youtube I needed.
Apparently the malware kicked in because I didn’t have a chinese keyboard.
After that a chinese friend helped me install the right app and avoid some pitfalls.