Midas
- First seen
- 2021-10-01 00:00:00
- Malware type
- ransomware
- Profile updated
- 2026-07-07 13:50:06
Targeted industries: healthcare-and-pharmaceutical financial-services government-and-public-sector
Context
This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.
Reports & references
- news.sophos.com — Windows Services Lay The Groundwork For A Midas Ransomware Attack (report)
- securityboulevard.com — Midas Ransomware Tracing The Evolution Of Thanos Ransomware Variants (report)
- zscaler.com — Midas Ransomware Tracing Evolution Thanos Ransomware Variants (report)
- ransomlook.io — Midas (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Midas (report)