R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/midas

midas

Inactive

This malware written in C# is a variant of the Thanos ransomware family and emerged in October 2021 and is obfuscated using SmartAssembly. In 2022, ThreatLabz analysed a report of Midas ransomware was slowly deployed over a two month period (ZScaler). This ransomware features also its own data leak site as part of its double extortion strategy.

44
Victims
1
Sites

Known Leak Sites

midasbkic5eyfox4dhnijkzc7v7e4hpmsb2qgux7diqbpna4up4rtdad.onionDLS

Victims (44)

Live
Basra Multipurposr Terminal
midas
SUPREME SERVICES
midas
Jiangsu Kaili Carpet Co., Ltd.
midas
New Company 04.2022
midas
NetCompany
midas
Bigmtransport
midas
1
midas
Grcouceiro
midas
S
midas
SOUTHWARK METAL MANUFACTURING
midas
New3
midas
New-New2
midas
J
midas
Keuerleber
midas
CIG de la Grande Couronne
midas
crossroadshealth lake
midas
New Corp
midas
MAX International Converters
midas
NewWave Technologies Inc
midas
CurIT
midas
Westrup Company
midas
GROUP OF COMPANY
midas
ChaddadGroup
midas
CRM GROUP
midas
Bouquet Mulligan DeMaio
midas

Top Targeted Countries

Unknown44

Activity

Total victims44
Countries affected1
Last seen