PROMETHIUM

{
  "id": "ATTACK:mobile:G0056",
  "title": "PROMETHIUM",
  "type": "IntrusionSet",
  "source_url": "https://attack.mitre.org/groups/G0056",
  "snapshot": "mobile-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "intrusion-set--efed95ba-d7e8-47ff-8c53-99c42426ee7c",
  "external_id": "G0056",
  "domain": "mobile",
  "created": "2018-01-16T16:13:52.465Z",
  "modified": "2026-07-31T20:48:51.011Z",
  "version": "2.1",
  "aliases": [
    "PROMETHIUM",
    "StrongPity"
  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "PROMETHIUM"
    },
    {
      "source_name": "Microsoft SIR Vol 21",
      "url": "http://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf"
    },
    {
      "source_name": "Talos Promethium June 2020",
      "url": "https://blog.talosintelligence.com/2020/06/promethium-extends-with-strongpity3.html"
    },
    {
      "source_name": "Microsoft NEODYMIUM Dec 2016",
      "url": "https://blogs.technet.microsoft.com/mmpc/2016/12/14/twin-zero-day-attacks-promethium-and-neodymium-target-individuals-in-europe/"
    },
    {
      "source_name": "StrongPity"
    },
    {
      "source_name": "Bitdefender StrongPity June 2020",
      "url": "https://www.bitdefender.com/files/News/CaseStudies/study/353/Bitdefender-Whitepaper-StrongPity-APT.pdf"
    }
  ]
}