Description
Rorschach is a ransomware family that researchers documented in 2023 and noted for its unusually fast encryption, which relied on efficient asymmetric cryptography and partial encryption modes. The malware also tampered with security software and abused scheduled tasks and custom tools to spread across Windows domains.
Stats
- First seen
- October 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.Rorschach.1 |
| Trojan.Ransom.Rorschach.A |
| Trojan.Ransom.Rorschach.B |
| Trojan.Ransom.Rorschach.C |
| Trojan.Ransom.Rorschach.D |
| Trojan.Ransom.Rorschach.E |