Processes spurring from the Ragnar Locker Ransomware have affected at least 52 critical infrastructure victims since January, but will terminate if it encounters systems in certain Russian and near-Russian locations.
Article Link: CISA Warns of Ransomware Gang, Issues Indicators of Compromise - Nextgov