Spook
Spook ransomware operated briefly in September-October 2021 as a rebrand of the Prometheus ransomware group (built on the Thanos builder), conducting double-extortion attacks against global targets with a concentration in manufacturing and unusually publishing all victim names regardless of ransom payment.
Profile source: SentinelOne opens in a new tabSpook
Family profile
Spook ransomware operated briefly in September-October 2021 as a rebrand of the Prometheus ransomware group (built on the Thanos builder), conducting double-extortion attacks against global targets with a concentration in manufacturing and unusually publishing all victim names regardless of ransom payment.
Operational record
1
YARA rules
1
Leak sites
0 available
