Skip to content
brandefense.io
Request A Demo
RansomwareFinancialOrganisation

Midas

Midas is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector.

Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Oct 1, 2021
Last seen
Dec 31, 2022
Record updated

Who They Target.

Sectors · 1
Labelsransomware

About Midas.

This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.