PROMETHIUM is an activity group that has been active since at least 2012. This group conducted a campaign in May 2016 and has primarily targeted Turkish victims. PROMETHIUM has demonstrated overlapping victim and campaign similarities to another activity group called NEODYMIUM .

Other names for this threat


This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.