I mean, the RuTracker thread identified it as malicious long before this report ever came out. A few people running sandbox tools, firewalls and host based IDS

I mean, the RuTracker thread identified it as malicious long before this report ever came out. A few people running sandbox tools, firewalls and host based IDS tools will catch pretty much all malware quickly based on behavior alone. I used to swear by Outpost Firewall as it was able to do things like detect applications adding to startup, injecting into other processes, gaining raw disk access, reading your browser profile for passwords, communicating with any unexpected hosts, etc. This is enough to rapidly identify most malware packaged with pirated software immediately. This isn't some advanced targeted attack, it's a script kiddie packing ransomware, password dumpers like iStealer, RATs like DarkComet, etc. The kind of thing these tools are designed to detect.