spook Unknown
First seen:
-
0
Total Victims
0
Victims (30d)
Details
Spook ransomware operated briefly in September–October 2021 as a rebrand of the Prometheus ransomware group (built on the Thanos builder), conducting double-extortion attacks against global targets with a concentration in manufacturing and unusually publishing all victim names regardless of ransom payment.
Leak Site
Onion URL:
http://spookuhvfyxzph54ikjfwf2mwmxt572krpom7reyayrmxbkizbvkpaid.onion/blog/
Metadata
Slug:
spook
Created: 14/01/2026 08:19
Updated: 28/06/2026 16:02