midas
First seen November 29, 2021Active44 claimed victims
The claims below are reproduced as posted by midas on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Basra Multipurposr Terminal | April 14, 2022 | ransomware_live | — |
| Jiangsu Kaili Carpet Co., Ltd. | April 7, 2022 | ransomware_live | — |
| SUPREME SERVICES | April 7, 2022 | ransomware_live | — |
| New Company 04.2022 | April 3, 2022 | ransomware_live | — |
| NetCompany | March 23, 2022 | ransomware_live | — |
| Bigmtransport | March 21, 2022 | ransomware_live | — |
| 1 | March 18, 2022 | ransomware_live | — |
| Grcouceiro | March 15, 2022 | ransomware_live | — |
| S | February 23, 2022 | ransomware_live | — |
| SOUTHWARK METAL MANUFACTURING | February 22, 2022 | ransomware_live | — |
| New3 | February 13, 2022 | ransomware_live | — |
| J | February 12, 2022 | ransomware_live | — |
| New-New2 | February 12, 2022 | ransomware_live | — |
| Keuerleber | February 1, 2022 | ransomware_live | — |
| CIG de la Grande Couronne | January 28, 2022 | ransomware_live | — |
| crossroadshealth lake | January 18, 2022 | ransomware_live | — |
| New Corp | December 27, 2021 | ransomware_live | — |
| MAX International Converters | December 25, 2021 | ransomware_live | — |
| NewWave Technologies Inc | December 8, 2021 | ransomware_live | — |
| Calibrus | November 29, 2021 | ransomware_live | — |
| Texas Enterprises, Inc (TEI) | November 29, 2021 | ransomware_live | — |
| G.E.W. CORPORATION LIMITED | November 29, 2021 | ransomware_live | — |
| Pellisard | November 29, 2021 | ransomware_live | — |
| Trendico GmbH | November 29, 2021 | ransomware_live | — |
| Consult Three Architects | November 29, 2021 | ransomware_live | — |
| Haiti Meat Processing SA | November 29, 2021 | ransomware_live | — |
| Xiamen Naier Electronics Co., Ltd. | November 29, 2021 | ransomware_live | — |
| Shanghai Cyeco Environmental Technology Co., Ltd. | November 29, 2021 | ransomware_live | — |
| KPS GROUP | November 29, 2021 | ransomware_live | — |
| Capital Distributors (S) Pte Ltd | November 29, 2021 | ransomware_live | — |
| Dongguan IMR Technology Co., Ltd | November 29, 2021 | ransomware_live | — |
| EPOWER INTERNATIONAL ( SHANGHAl )CO.,LTD. | November 29, 2021 | ransomware_live | — |
| Raisetech | November 29, 2021 | ransomware_live | — |
| CABINET CAZANAVE | November 29, 2021 | ransomware_live | — |
| HAMTACO | November 29, 2021 | ransomware_live | — |
| EISENBERG HEFLER & LEVY LLP | November 29, 2021 | ransomware_live | — |
| RWL GmbH | November 29, 2021 | ransomware_live | — |
| IDSFULFILLMENT | November 29, 2021 | ransomware_live | — |
| Bouquet Mulligan DeMaio | November 29, 2021 | ransomware_live | — |
| CRM GROUP | November 29, 2021 | ransomware_live | — |
| ChaddadGroup | November 29, 2021 | ransomware_live | — |
| GROUP OF COMPANY | November 29, 2021 | ransomware_live | — |
| Westrup Company | November 29, 2021 | ransomware_live | — |
| CurIT | November 29, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).