Ransomware Keyboard Spoofer

[[correlate]]

What's interesting about some ransomware is that it checks system settings before performing the malicious operations in order to determine where the malware is running. One check in particular is the system's current keyboard setting which is used to determine the language of the user. In cases where the malware detects Russian or other periphery language codes, the ransomware simply exits. The most reasonable explanation is that the malware authors do not want to damage systems where they could actually be held accountable.

CyDec Security

www.cydecsecurity.com

CyDec Security :: Ransomware Keyboard Spoofer

www.cydecsecurity.com