Thanatos Ransomware

Malware type
ransomware
Profile updated
2026-07-07 15:22:40

Context

Thanatos Ransomware is a malware strain that encrypts files on the infected system and demands a ransom payment in cryptocurrency. The ransomware is known for its unique approach as it fails to store encryption keys, making file recovery difficult even after paying the ransom.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Win.Thanatos Ransom (report)
  • Cisco Talos — Thanatosdecryptor (report)
  • bleepingcomputer.com — Thanatos Ransomware Decryptor Released By The Cisco Talos Group (report)
  • bleepingcomputer.com — Thanatos Ransomware Is First To Use Bitcoin Cash Messes Up Encryption (report)

External references