The Sigrun Ransomware is providing decryption for Russian victims for free, while asking for a ransom payment of $2,500 in Bitcoin or Dash for everyone else. The developer told us that they are “not from former USSR republics. I added it because of my Belarus partners”” The S!Ransomware already tries to avoid infecting Russian victims by detecting the keyboard layout when the ransomware is executed. If the computer is using a Russian layout
Source: security