Rorschach Ransomware
Aliases: BabLock
- First seen
- 2023-04-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:17:37
Targeted industries: financial-services healthcare-and-pharmaceutical education-and-nonprofits technology-and-telecommunications government-and-public-sector
Context
Rorschach Ransomware, also known as BabLock, is a sophisticated ransomware strain designed to encrypt the victim's files and demand a ransom in exchange for the decryption key. It has targeted multiple sectors, including financial services and healthcare, often resulting in significant operational disruptions.
Reports & references
- bleepingcomputer.com — Italian University La Sapienza Goes Offline After Cyberattack (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Rorschach (report)
- medium.com — Rorschach Ransomware Analysis With Attack Flow 7Fa5Ff613A75 (report)
- Trend Micro — An Analysis Of The Bablock Ransomware (report)
- research.checkpoint.com — Rorschach A New Sophisticated And Fast Ransomware (report)
- group-ib.com — Bablock Ransomware (report)
- Trend Micro — Iocs An Analysis Of The Bablock Ransomware.Txt (report)