john lee 1 Report post Posted June 8 A quick analysis from me for example shown that most STOP ransomware samples have a code that checks the keyboard layout for avoiding CIS countries. Quote Share this post Link to post Share on other sites
GT500 823 Report post Posted June 9 9 hours ago, john lee said: A quick analysis from me for example shown that most STOP ransomware samples have a code that checks the keyboard layout for avoiding CIS countries. It's not abnormal for ransomwares to only target certain geographical regions, or to whitelist certain countries where the criminals who made the ransomware don't want it to encrypt peoples' files. Quote Share this post Link to post Share on other sites
