HOMETHREATSThanatos Ransomware
APT / THREAT GROUP

Thanatos Ransomware

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.thanatos_ransom

Threat Analysis

Thanatos Ransomware is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.bleepingcomputer.com/news/security/thanatos-ransomware-decryptor-released-by-the-cisco-talos-group/
→https://www.bleepingcomputer.com/news/security/thanatos-ransomware-is-first-to-use-bitcoin-cash-messes-up-encryption/
→https://blog.talosintelligence.com/2018/06/ThanatosDecryptor.html

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Thanatos Ransomwarewin.thanatos_ransom

External Intelligence

Malpedia: win.thanatos_ransom

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Thanatos Ransomware