Krebs said that some malware checks for a cyrillic keyboard to try and geo target outside of the country of operation. This seems to be the same type of thing.
https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...
replies(1):
https://krebsonsecurity.com/2021/05/try-this-one-weird-trick...