HOMETHREATSStrongPity
APT / THREAT GROUP

StrongPity

2
aliases
Last seen:May 20, 2026

Intelligence Profile

According to Mitre, StrongPity is an information stealing malware used by PROMETHIUM.

Threat Analysis

StrongPity is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://0xthreatintel.medium.com/uncovering-apt-c-41-strongpity-backdoor-e7f9a7a076f4
→https://anchorednarratives.substack.com/p/recover-your-files-with-strongpity
→https://anchorednarratives.substack.com/p/tracking-strongpity-with-yara
→https://blog.minerva-labs.com/a-new-strongpity-variant-hides-behind-notepad-installation
→https://blog.talosintelligence.com/2020/06/promethium-extends-with-strongpity3.html

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

win.strongpityStrongPity

External Intelligence

Malpedia: win.strongpity

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search StrongPity
StrongPity — APT / Threat Group | Threat Intelligence | CTIWATCH.COM