StrongPity

Internal ID: win.strongpity

aliases

Last seen:Mar 17, 2026

Intelligence Profile

According to Mitre, StrongPity is an information stealing malware used by PROMETHIUM.

Threat Analysis

StrongPity is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://0xthreatintel.medium.com/uncovering-apt-c-41-strongpity-backdoor-e7f9a7a076f4

→https://anchorednarratives.substack.com/p/recover-your-files-with-strongpity

→https://anchorednarratives.substack.com/p/tracking-strongpity-with-yara

→https://blog.minerva-labs.com/a-new-strongpity-variant-hides-behind-notepad-installation

→https://blog.talosintelligence.com/2020/06/promethium-extends-with-strongpity3.html

→https://blog.talosintelligence.com/2020/12/2020-year-in-malware.html

→https://blogs.blackberry.com/en/2021/11/zebra2104

→https://citizenlab.ca/2018/03/bad-traffic-sandvines-packetlogic-devices-deploy-government-spyware-turkey-syria/

→https://cybleinc.com/2020/12/31/strongpity-apt-extends-global-reach-with-new-infrastructure/

→https://mp.weixin.qq.com/s/5No0TR4ECVPp_Xv4joXEBg

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.strongpity

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search StrongPity