I'm doing an assessment on the potential infection of bad rabbit in our organization. Our staff do not have admin privilege on their hosts. We have also blocked the iocs. Am I right to say without admin, the ransomware wouldn't be able to install the fake flash update?
https://www.bleepingcomputer.com/news/security/bad-rabbit-ransomware-outbreak-hits-eastern-europe/