Ransomfeed

Profilo, status e statistiche (dal 12-01-2020)

Dettaglio cyber gang

Profilo gang by OSINT sources: [source: 0]

According to PCrisk, Rook is ransomware (an updated variant of Babuk) that prevents victims from accessing/opening files by encrypting them. It also modifies filenames and creates a text file/ransom note (HowToRestoreYourFiles.txt). Rook renames files by appending the .Rook extension. For example, it renames 1.jpg to 1.jpg.Rook, 2.jpg to 2.jpg.Rook.

Alerts:

Statistiche

N. rivendicazioni	2024	2023	2022
1	0	0	1

URLs

Fonte onion	Ultimo titolo	Status	Ultimo scrape	Versione Tor
gamol6n6p2p4c3ad7gxmx3ur7wwdwlywebo2azv3vv5qlmjmole2zbyd.onion	We Are Rook!!!	🔴	26-01-2022	3

Materiale utile

URL ricerca source: 0

https://blog.cyble.com/2022/03/15/deep-dive-analysis-pandora-ransomware/

https://chuongdong.com/reverse%20engineering/2022/01/06/RookRansomware/

https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering/blob/main/NightSky_Ransomware%E2%80%93just_a_Rook_RW_fork_in_VMProtect_suit/NightSky_Ransomware%E2%80%93just_a_Rook_RW_fork_in_VMProtect_suit.md

https://seguranca-informatica.pt/rook-ransomware-analysis/

https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself

https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself/

https://www.secureworks.com/research/bronze-starlight-ransomware-operations-use-hui-loader

https://www.sentinelone.com/labs/new-rook-ransomware-feeds-off-the-code-of-babuk/