PROMETHIUM
- ID
- G0056
- Associated names
- StrongPity
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
PROMETHIUM is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish targets. PROMETHIUM has demonstrated similarity to another activity group called NEODYMIUM due to overlapping victim and campaign characteristics.[1][2][3]
Techniques used (11)
- T1036.004 Masquerade Task or Service
- T1036.005 Match Legitimate Resource Name or Location
- T1078.003 Local Accounts
- T1189 Drive-by Compromise
- T1204.002 Malicious File
- T1205.001 Port Knocking
- T1543.003 Windows Service
- T1547.001 Registry Run Keys / Startup Folder
- T1553.002 Code Signing
- T1587.002 Code Signing Certificates
- T1587.003 Digital Certificates