Any sources or references on that? That would imply the vast majority of malware does not target devices set to Russian. Why wouldn't malware targeting non-English, non-Simplified Chinese, or even non-Farsi or non-Arabic be common as well?

Russian authorities generally leave you alone as a hacker unless you start hacking Russians.

Because most of the stuff is produced in Russia by Russian residents, why would they want the legal liability?