Rokku
- First seen
- 2016-05-01 00:00:00
- Malware type
- ransomware
- Profile updated
- 2026-07-07 15:43:05
Targeted industries: financial-services healthcare-and-pharmaceutical technology-and-telecommunications
Context
Rokku is a type of ransomware potentially associated with the Chimera malware family. It encrypts files on the victim's machine, demanding payment in exchange for the decryption key.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Rokku_Auto (yara-rule)
Reports & references
- blog.malwarebytes.org — Rokku Ransomware (report)
- id-ransomware.blogspot.com — Rokku Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Rokku (report)
- blog.malwarebytes.com — Rokku Ransomware (report)