{"id":252632,"date":"2021-05-18T18:56:52","date_gmt":"2021-05-18T15:56:52","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/will-installing-a-russian-keyboard-save-you-from-ransomware-review-geek\/"},"modified":"2021-05-18T18:56:52","modified_gmt":"2021-05-18T15:56:52","slug":"will-installing-a-russian-keyboard-save-you-from-ransomware-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/will-installing-a-russian-keyboard-save-you-from-ransomware-review-geek\/","title":{"rendered":"#Will Installing a Russian Keyboard Save You From Ransomware? \u2013 Review Geek"},"content":{"rendered":"

“#Will Installing a Russian Keyboard Save You From Ransomware? \u2013 Review Geek”<\/strong><\/p>\n

\n
\"A
ADA_photo\/Shutterstock<\/a><\/span><\/figcaption><\/figure>\n

Ransomware attacks from Eastern European groups are increasing in frequency and scope, and after last week\u2019s Colonel Pipeline attack<\/a> caused a scramble for gasoline across the U.S., people are asking how to defend themselves. Now, cybersecurity expert Brian Krebs suggests that people install the Windows 10 Russian keyboard<\/a> on their computer to ward off attackers. But does this simple trick really work?<\/p>\n

Krebs explains the reasoning behind this trick in a Twitter discussion<\/a> and Krebs on Security<\/a> blog post. According to him, Russian ransomware groups have an unspoken, somewhat symbiotic relationship with the Kremlin. So long as these groups avoid attacking countries within the Commonwealth of Independent States (former Soviet states that are still allies with Russia), then they can avoid prosecution and public scrutiny within their home country.<\/p>\n

But computer viruses spread like wildfire, so how do ransomware groups like DarkSide (which the FBI blames for the Colonel Pipeline attack) keep allied countries out of their crosshairs? Krebs says that the solution is quite simple\u2014if Russian malware detects that a Windows 10 computer has installed CIS keyboards, then it will destroy itself and leave the computer untouched. Krebs says that you don\u2019t even need to use the foreign-language keyboard, you just need to install it through your Windows 10 settings.<\/p>\n

It\u2019s true, Russian malware sometimes contains self-destruct code to avoid controversy at home. These safeguards may check for installed keyboards and snoop through the Windows registry for tell-tale signs of a computer\u2019s location on the global stage. But installing a Cyrillic keyboard isn\u2019t an all-in-one safeguard against ransomware for a few reasons.<\/p>\n

For one, not all ransomware has a self-destruct mechanism, and as ItWire notes<\/a>, hackers can toggle these safeguards anytime they want. While installing a Cyrillic keyboard may give you a small layer of defense, you\u2019re better off focusing on safe internet practices. Don\u2019t open unknown email attachments, use 2FA<\/a> and a password manager, and save backups important files to an external drive and multiple cloud services in case of an attack.<\/p>\n

And if you\u2019re a large business or local government, then the Russian keyboard trick is basically useless. Ransomware groups don\u2019t just fumble their way into bringing down oil pipelines and hospitals, they research their victims for months or years before making any moves. For reference, DarkSide reportedly made $90 million<\/a> in its Colonel Pipeline attack\u2014installing a Russian keyboard on some computers won\u2019t stop hackers who are aiming for profits that large.<\/p>\n

If you\u2019re worried about ransomware, feel free to download<\/a> a Russian language keyboard<\/a> on your Windows computer or use Brian Krebs\u2019 special script<\/a> to add a Russian identifier to your Windows registry. But again, you\u2019re probably better off focusing on proactive security tools, like 2FA<\/a>, a VPN, and a password manager.<\/p>\n

Source: Krebs on Security<\/a><\/small>\n<\/div>\n