Thanatos
Aliases: Alphabot
- First seen
- 2018-02-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 15:43:29
Targeted industries: financial-services retail-and-hospitality technology-and-telecommunications
Context
first ransomware seen to ask for payment to be made in Bitcoin Cash (BCH)
Detection coverage
- 2 YARA rules
Detection rules
- MALPEDIA_Win_Thanatos_Ransom_Auto (yara-rule)
- MALPEDIA_Win_Thanatos_Auto (yara-rule)
Reports & references
- mobile.twitter.com — 968478323889332226 (report)
- eclecticiq.com — Thanatos Ransomware First Ransomware Ask Payment Bitcoin Cash (report)
- id-ransomware.blogspot.com — Thanatos Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Thanatos (report)
- proofpoint.com — Death Comes Calling Thanatos Alphabot Trojan Hits Market (report)