The author of the Sigrun Ransomware is providing decryption for Russian victims for free, while asking for a ransom payment of $2,500 in Bitcoin or Dash for everyone else. While it is not uncommon for Russian ransomware developers to purposely avoid targeting Russian citizens, it is less common to see the developers outwardly helping them for free.
This was first reported
Alex Svirid, a security researcher who is know for analyzing ransomware for weaknesses, shared his discovery on Twitter.
..
...
Malwarebytes security researcher
S!Ri then replied to Svirid's tweet showing emails to the author from both a U.S. based victim and a Russian victim to illustrate this point.
..
....