Uptime Hamster: 10d 9h 48mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza prometheus

prometheus

2 incidentes 1 paises 0 sectores ransomware RU Ultimo: 2026-06-29
Ver en IntelTracker → APTTrail →
Prometheus is a ransomware group that emerged in February 2021, operating a double extortion model where victim data is encrypted and threatened with public release if ransom demands are not met. The group functions like a professional enterprise, managing victim interactions through a unique customer service ticketing system that includes payment countdowns and refers to victims as "customers." While Prometheus claimed an affiliation with the prominent REvil ransomware group, cybersecurity researchers found no evidence to support this assertion, suggesting it was a tactic to bolster their reputation and increase pressure on victims. Prometheus is recognized for being a variant of the Thanos ransomware, utilizing the Thanos builder for its payloads. Its primary motivation is financial gain through these illicit ransomware operations, but its origin remains unconfirmed.

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / onionuppromethw27cbrcot.onionprometheus
DLS / leak siteunknownransomware.anggipradana.comRansomware Group: prometheus
Tecnicas MITRE
T1199, T1071, T1190, T1123, T1105, T1490
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (SOCRadar)

United Arab EmiratesAustriaBelgiumBrazilSwitzerlandFranceUnited KingdomGhanaItalyMexico

Sectores objetivo (SOCRadar)

Food ManufacturingOther Information ServicesMonetary Authorities-Central BankAccommodationManufacturingPublic AdministrationOil & GasEducational ServicesEnergy & Utilities Insurance

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com