News for hackers. Stuff that matters.
Re:Ransomware gangs are complaining that other crooks are st... by ianhawes on Sunday October 03, 2021 @06:25AM (#28736000)
It has been common knowledge for years that most malware and ransomware look for the presence of a Cyrillic keyboard and exit quietly if it’s found.
Re:Ransomware gangs are complaining that other crooks are st... by bserge on Sunday October 03, 2021 @10:55AM (#28737662)
Lol, I don't believe that, but I like to entertain the thought that malware leaves me alone just because I have had a Russian layout installed ever since I can remember.
Re:Ransomware gangs are complaining that other crooks are st... by sodality2 on Sunday October 03, 2021 @11:31AM (#28737952)
Re:Ransomware gangs are complaining that other crooks are st... by Sosh101 on Sunday October 03, 2021 @09:17AM (#28736956)
Anything to support that? Seems like an easy step to protect yourself if true.
Re:Ransomware gangs are complaining that other crooks are st... by nvr219 on Sunday October 03, 2021 @09:24AM (#28736996)
Re:Ransomware gangs are complaining that other crooks are st... by sysihyk on Sunday October 03, 2021 @04:10PM (#28740124)
Honestly, this looks like yet another Russian Hoax iteration. Also, made me to figure Brian Krebs is merely a journalist, while real infosec researcher is Chris Krebs.
Re:Ransomware gangs are complaining that other crooks are st... by threeseed on Sunday October 03, 2021 @04:52PM (#28740407)
They also talked to other people including the Founder and Chief Research Officers at Unit221B about whether workarounds e.g. adding an additional keyboard were effective.

So clearly it's well known that this is real and accurate just as most of the reporting is on Russia.

Re:Ransomware gangs are complaining that other crooks are st... by sysihyk on Sunday October 03, 2021 @06:03PM (#28740893)
> is real and accurate just as most of the reporting is on Russia

Except when it turn out to be fake news as it usually happens. For instance, linked malware research paper doesn't mentions alleged keyboard layout probe and never reveal how this probe to be performed. So, bogus.

> workarounds e.g. adding an additional keyboard

Just as bogus as placing succulent plant to "protect from computer radiation"

Re:Ransomware gangs are complaining that other crooks are st... by wepple on Sunday October 03, 2021 @09:26AM (#28737010)
This is really common, not just keyboards but time zone settings and even geo IP lookup.

The effort required to make your enterprise look like it’s in Russia is definitely not worth the effort given that this would only stop one slice of organized crime.

Re:Ransomware gangs are complaining that other crooks are st... by sysihyk on Sunday October 03, 2021 @04:14PM (#28740155)
This implies there Russian Conspiracy members are actually caring about their domestic cybercrime which is clearly not true.
Re:Ransomware gangs are complaining that other crooks are st... by hnlmorg on Sunday October 03, 2021 @05:46PM (#28740784)
They do care. That's the point. Russian's largely have a free pass to attack international targets provided they do not hit domestic targets.
Re:Ransomware gangs are complaining that other crooks are st... by sysihyk on Monday October 04, 2021 @03:51AM (#28744195)
There is no evidence to back this claim.

Instead, there are stats indicating that The Mother Of All Hoaxes definitely ISN'T safe haven infosec-wise.

Additionally, Krebs completely forgot what there is war between Ukraine and Russia, so there are no reasons for such alleged protective measures any more.