Security News > 2021 > May > Adding a Russian Keyboard to Protect against Ransomware

Adding a Russian Keyboard to Protect against Ransomware
2021-05-18 15:31

A lot of Russian malware - the malware that targeted the Colonial Pipeline, for example - won't install on computers with a Cyrillic keyboard installed.

In Russia, for example, authorities there generally will not initiate a cybercrime investigation against one of their own unless a company or individual within the country's borders files an official complaint as a victim.

DarkSide, like a great many other malware strains, has a hard-coded do-not-install list of countries which are the principal members of the Commonwealth of Independent States - former Soviet satellites that mostly have favorable relations with the Kremlin.

Simply put, countless malware strains will check for the presence of one of these languages on the system, and if they're detected the malware will exit and fail to install.

Will installing one of these languages keep your Windows computer safe from all malware? Absolutely not.

There is plenty of malware that doesn't care where in the world you are.


News URL

https://www.schneier.com/blog/archives/2021/05/adding-a-russian-keyboard-to-protect-against-ransomware.html