Spook
Ransomware Group Profile
Overview
Spook ransomware operated briefly in September–October 2021 as a rebrand of the Prometheus ransomware group (built on the Thanos builder), conducting double-extortion attacks against global targets with a concentration in manufacturing and unusually publishing all victim names regardless of ransom payment.
Dark Web Infrastructure (1)
spookuhvfyxzph54ikjfwf2mwmxt572krpom7reyayrmxbkizbvkpaid.onion
Activity Timeline
First Seen2021
Last Seen2021
Leak Sites1
Quick Actions