Skip to content

PROMETHIUM

PROMETHIUM is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish targets. PROMETHIUM has demonstrated similarity to another activity group called NEODYMIUM due to overlapping victim and campaign characteristics.

ATT&CK ID: G0056
Techniques: 9
Tools: 2

Also tracked as StrongPity

Techniques

Resource Development

Develop Capabilities

Initial Access

Valid Accounts Drive-by Compromise

Execution

Persistence

Valid Accounts Traffic Signaling Create or Modify System Process Boot or Logon Autostart Execution

Privilege Escalation

Valid Accounts Create or Modify System Process Boot or Logon Autostart Execution

Stealth

Masquerading Valid Accounts Traffic Signaling

Defense Impairment

Subvert Trust Controls

Command and Control

Traffic Signaling

Software

StrongPity · Truvasys

MITRE ATT&CK All threat actors