Discovered during a recent incident response engagement, the malware avoids Russian computers and uses a single symmetric key for encrypting every compromised system.

from Dark Reading https://ift.tt/3vhKxzq
via IFTTT