Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor Claimedmidas
This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.
Activity timeline
A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.
Types: onion.
Actor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedActor-claimed victim evidence. This listing is not independent confirmation of compromise.
Actor ClaimedThe interactive view includes 45 dated events with category filters and paging.
Identity and attribution
Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.
Name map
Loading CVEs, techniques, indicators, malware, victims, and activity...