Ransomware group

Midas ransomware: victims and leak site activity

The Midas ransomware group has listed 16 victims on its leak site since January 2022; its latest post is from 14 April 2022. Most targeted sector: Transportation.

Total posts 16
First seen 2022-01-18
Latest post 2022-04-14
Countries hit 0

About Midas

This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.

Leak site (Tor)
http://midasbkic5eyfox4dhnijkzc7v7e4hpmsb2qgux7diqbpna4up4rtdad.onion/blog.php

Midas victims per year

16 2022

All 16 victims

Search every post in the full table.
Victim Country Sector Discovered
Basra Multipurposr Terminal Transportation
SUPREME SERVICES Professional Services
Jiangsu Kaili Carpet Co., Ltd. Agriculture and Food Production
New Company 04.2022
NetCompany Technology
Bigmtransport Transportation
1
Grcouceiro Retail & E-Commerce
S
SOUTHWARK METAL MANUFACTURING Manufacturing
New3
New-New2
J
Keuerleber
CIG de la Grande Couronne Government & Defense
crossroadshealth lake Healthcare