Thermos
Thermos is a threat actor group, tracked by Brandefense. It exploits 1 known CVE.
- Techniques
- 0
- Exploited CVEs
- 1
- First seen
- Jan 24, 2025
- Last seen
- Jan 24, 2025
- Record updated
About Thermos.
The threat actor known as "thermos", previously using the alias "kingkonqx", has been identified as an active member of an illegal online platform since February 13, 2022. With a reputation score of 391, their activity primarily revolves around DROP services and the sale of illicit products. Their operations target the financial sector globally, including credit card laundering and asset extraction from stolen cryptocurrency accounts. Across the platform, they have contributed 220 topics and 1,290 messages, establishing a strong presence. Communication has been traced to Telegram (kingkonqx), and their primary motivation appears to be financial gain.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.