PROMETHIUM

Unattributed cyber threat groupTrackedPending verification

Also known as: StrongPity

CyberUNK

Identification silhouette. Not drawn to scale between entries.

Fact cardConfidence · Source

System

TypeUnattributed cyber threat group

Alternative designationsStrongPity

ProliferationOrigin country only

Active since2012At least 2012Med^[1]

MITRE ATT&CK IDG0056High^[1]

Capabilities

ATT&CK techniques used11ATT&CK v20.1High^[1]

Malware and toolsStrongPity, Truvasys2 malware and tool entries linked in ATT&CKHigh^[1]

Attribution and activity

Attributed sponsorNot attributed by ATT&CKLow^[1]

TargetsThe group has conducted operations globally with a heavy emphasis on Turkish targets.Med^[1]

Notable activityC0033 (C0033, 2016–2023)Med^[1]

Notes

PROMETHIUM is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish targets. PROMETHIUM has demonstrated similarity to another activity group called NEODYMIUM due to overlapping victim and campaign characteristics. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.

Summary

PROMETHIUM is an activity group focused on espionage that has been active since at least 2012. The group has conducted operations globally with a heavy emphasis on Turkish targets.

Draft entry. Values come from the cited public sources and are awaiting editor verification.

Compare JSON

Operators

Sources

PROMETHIUM, Group G0056, MITRE ATT&CK
Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08

Change log

2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G0056)