On: Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

[udev4096]

LPEs exist. In linux world, you get tons of new LPEs every week. On windows, significantly harder