thanos
- Malware type
- ransomware
- Family
- Malware family
- Last IoC activity
- 2026-06-10 06:58:44
- Profile updated
- 2026-07-07 13:58:20
Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector
Context
Thanos is a ransomware family known for its Ransomware-as-a-Service (RaaS) offerings, allowing affiliates to customize their attacks. The malware employs advanced encryption techniques to lock victims out of their files, demanding payment for decryption keys.
Detection coverage
- 2 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Thanos (yara-rule)
- DITEKSHEN_INDICATOR_KB_ID_Ransomware_Thanos (yara-rule)
Reports & references
- ransomlook.io — Thanos (report)