3 ms·
As an example, the DarkSide malware (the one used against the Colonial Pipeline) explicitly checks if it's running on a computer in the CIS (Russia+countries no
by sofixa 3y ago
As an example, the DarkSide malware (the one used against the Colonial Pipeline) explicitly checks if it's running on a computer in the CIS (Russia+countries nostalgic of the Soviet Union / without a better choice) and exits.
- jasonwatkinspdx 3y agoOh interesting, I'd not heard that. Thanks.
- prmoustache 3y agoWell, this doesn't mean they work for FSB but rather they want to stay away from them. If I was based in a country I would not want to target those that can more easily get me into jail and/or kill me. I have no idea if FSB work for them, this is more speculation than open secret, but they certainly do tolerate them and see them in a good eye as long as they target western companies and agencies. The enemy of my enemies is my friend.