Ransomware Rook

Rook ransomware is the newest malware listed among the possible attackers that takes advantage of the holiday season to increase their attacks.

The vast majority of ransomware attacks are carried out on weekends and holidays, and criminals take advantage of the fact that businesses are off to execute the system attack more easily.

The emergence of Rook brings this concern of yet another group hunting for companies with flaws in their systems. Like the vast majority of ransomware, Rook uses the tactic of double extortion to pressure victims into payment.

In the ransom note left on the victim’s computer, the group threatens that if contact is not made within three days, the files will start to be leaked, and if contact is made within these three days, the ransom will be halved.

In their note, the group leaves numerous threats if the victim seeks outside help to try to negotiate or decrypt the files.

In order for their intentions to be taken seriously, the group releases the decryption key for up to three files that are no larger than 1MB. The groups need to weaken the mind of the victims so that they see paying the ransom as the only way out to get their files back.

The groups need to weaken the mind of the victims so that they see paying the ransom as the only way out to get their files back.

Digital Recovery specializes in recovering encrypted files without the need for a decryption key.

Recover Files Encrypted by Rook Ransomware

Recovery of data encrypted by ransomware is a challenge for any company, few of them have achieved such a successful recovery type, and we are among those few companies that have.

We have developed unique technology that is able to recover encrypted files, even if they have been encrypted completely.

This technology is called Tracer, and with it we have achieved good results in recovering encrypted files on HD, SSD, Database, Virtual Machines, Storages, RAID Systems, Servers and others.

All our processes are developed with a high standard of the customer data protection and we provide a non-disclosure agreement (NDA).

For more than two decades we have been committed to developing technologies to recover data in any situation. Count on us to restore your company to full operation.

We are always online

Please fill out the form, or select your preferred contact method. We will contact you to start recovering your files.

Latest insights from our experts

Recuperar memoria flash

What is Flash Memory?

Since its invention in the 1980s, Flash memory has revolutionized digital data storage. Essential for mobile devices, digital cameras, storage units and more, it combines


Through unique technologies Digital Recovery can bring back encrypted data on any storage device, offering remote solutions anywhere in the world.

Discover the invisible vulnerabilities in your IT – with the 4D Pentest from Digital Recovery