Source for CARBANAK backdoor leaked and placed on GitHub

Best way to learn Russian is to reverse engineer a virus.

One would presume such access would come with NDAs and not permit these researchers to just publish the files.

Carbanak is a piece of malware originally used to rob banks in Ukraine and Russia by jackpotting ATMs and changing the account balances. Since then the malware has lived on to be used to target US companies such as Chipotle, Ruby Tuesday, Baja Fresh, casinos and so many more. This malware was held tight by the hackers and not shared but now, you can have it too.

The podcast Darknet Diaries Ep 35 does a good job explaining it. Very fascinating.

I don't know about Russians, but Shift-JIS/cp932 is still popular in Japan as if Windows never supported UTF-8, so perhaps something similar is happening there.

And security researchers around the world can poke at it and figure out how to defend against it and derivatives.

Another day, another better mousetrap.

Translated some RU sentences to EN. It's in the README.

if the hash changes [because you append KILROY WAS HERE into a readmefile] then the file cant be tracked as easily. this technique usually involves large padding structures so file size isnt an easy clue to the new file hash. Its a way of evading filters and packet sniffers so the file get from A to B without C stomping on it.