Ransomware group

Midas ransomware: victims and leak site activity

The Midas ransomware group has listed 16 victims on its leak site since January 2022; its latest post is from 14 April 2022. Most targeted sector: Transportation.

Total posts 16
First seen 2022-01-18
Latest post 2022-04-14
Countries hit 0

About Midas

This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.

Leak site (Tor)
http://midasbkic5eyfox4dhnijkzc7v7e4hpmsb2qgux7diqbpna4up4rtdad.onion/blog.php
Profile
ransomware.live

Midas victims per year

16 2022

All 16 victims

Search every post in the full table.
Victim Country Sector Discovered
Basra Multipurposr Terminal — Transportation
SUPREME SERVICES — Professional Services
Jiangsu Kaili Carpet Co., Ltd. — Agriculture and Food Production
New Company 04.2022 — —
NetCompany — Technology
Bigmtransport — Transportation
1 — —
Grcouceiro — Retail & E-Commerce
S — —
SOUTHWARK METAL MANUFACTURING — Manufacturing
New3 — —
New-New2 — —
J — —
Keuerleber — —
CIG de la Grande Couronne — Government & Defense
crossroadshealth lake — Healthcare