From malware.news
Executive Summary
- Spook ransomware started on September 26th, 2021.
- The double extortion site of Spook ransomware is similar to the double extortion site of Prometheus ransomware.
- Spook ransomware is very similar to Prometheus ransomware with ransom notes and websites. Hence Prometheus ransomware was rebranded to Spook ransomware and still using Thanos Builder.