PROMETHIUM

Overview

PROMETHIUM is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish targets. PROMETHIUM has demonstrated similarity to another activity group called NEODYMIUM due to overlapping victim and campaign characteristics.

TTPs — 11 techniques across 6 tactics

Tools & malware (2)

Truvasys · StrongPity

Reporting (3)

• StrongPity APT - Revealing Trojanized Tools, Working Hours and Infrastructure — Tudorica, R. et al
• PROMETHIUM extends global reach with StrongPity3 APT — Mercer, W. et al
• Microsoft Security Intelligence Report Volume 21 — Anthe, C. et al