Back to Threat Groups
prometheus
INACTIVEransomware group
Ransomware written in .NET, apparently derived from the codebase of win.hakbit (Thanos) ransomware.
Victims
0
First Seen
—
Last Active
May 12, 2026
Victims (0)
No victims recorded
Infrastructure
leak site
OFFLINE
http://promethw27cbrcot.onion/blog/never crawled