Ransomware.live - Group : Rook

Ransomware Group:

Rook

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

According to PCrisk, Rook is ransomware (an updated variant of Babuk) that prevents victims from accessing/opening files by encrypting them. It also modifies filenames and creates a text file/ransom note (HowToRestoreYourFiles.txt). Rook renames files by appending the .Rook extension. For example, it renames 1.jpg to 1.jpg.Rook, 2.jpg to 2.jpg.Rook.

Sites

Favicon	Title	Available	Last Visit	FQDN	Screenshot
	We Are Rook!!!	🔴	2022-01-26 15:24:16.586824	gamol6n6p2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion	N/A

Ransom Note(s)

Click here to see Ransom Note(s)

Activity over time

Worldmap

9 Victims

Abdi ibrahim

Ransomware Group:

Discovery Date: 2022-01-08 10:19

Sector:

Group:

Evalueserve

Ransomware Group:

Discovery Date: 2021-12-28 02:35

Sector:

Group:

DENSO

Ransomware Group:

Discovery Date: 2021-12-28 02:35

Sector:

Group:

Data breach summary

Ransomware Group:

Discovery Date: 2021-12-26 13:22

Sector:

Group:

Rossell Techsys(Data will be given tomorrow)

Ransomware Group:

Discovery Date: 2021-12-18 16:06

Sector:

Group:

KMG Prestige, Inc. (Data will be given tomorrow)

Ransomware Group:

Discovery Date: 2021-12-18 16:06

Sector:

Group:

Rosendahl Design Group

Ransomware Group:

Discovery Date: 2021-12-14 14:56

Sector:

Group:

Rossell Techsys

Ransomware Group:

Discovery Date: 2021-12-14 13:18

Sector:

Group:

KMG Prestige, Inc.

Ransomware Group:

Discovery Date: 2021-12-07 07:01

Sector:

Group:

×

Infostealer information available for

Employees(s)	Customer(s)	Third Party Employee(s)

This information is provided by HudsonRock