Thanatos: Likely the First Bitcoin Cash Ransom Virus
TechnologyBit News Today2 min read
On New Year's Day, several earlier 2026 reports surfaced of a new type of malware, named Thanatos. The ransom virus, likely unique for demanding Bitcoin Cash (BCH), has infected a number of American small businesses in the past month.
Computer systems in three states were rendered unusable over the New Year holiday break, with demands that the affected companies pay to decrypt their data. ## Bitcoin Cash-Ransomed Systems
The FBI Cyber Division is investigating the incidents, which involve unreported amounts of Bitcoin Cash being transmitted to accounts suspected to be under the control of the Thanatos ransomware gang.
All of the affected businesses were small in size, and operate in sectors that include food and beverage, pet care, and alcohol retailing.
Affected companies in New York, Washington D.C., and Florida were forced to temporarily close and suspend activities, and informed employees and customers that payments had been made.
The nature of the ransomware and demands were not immediately evident in these reports. However, it emerged that Bitcoin Cash transfers were being reviewed by the FBI as part of the case. ## Ransom Demands in Bitcoin Cash
Thanatos may have received its name due to Thanatos being the Greek god of nonviolent death, although reports say no specific demands were made, beyond the ransoms themselves.
In another similarity to the acts of Thanatos, the virus apparently hit the businesses on the first day of the New Year.
The Bitcoin Cash aspect remains notable because recent ransomware has typically asked for more popular cryptocurrencies, like Bitcoin.
This is potentially the first known case of the Bitcoin Cash cryptocurrency being used to pay a ransom demand in 2026. Indeed, Bitcoin Cash has been used as part of a ransom payment overall, but not for a long time.
Cyprian Brewer of the Bitcoin Cash Foundation said the Foundation was aware of the reports. "We're looking into it, and will make a statement in the coming hours. We are also working on a press release."
The Foundation has been aware of past events in which Bitcoin Cash has been ransomed, and encourages users to be vigilant.
An editor at a local newspaper in New Zealand also paid a small amount of bitcoin cash to decrypt his business computer, after a hacker took over the machine.
The FBI Cyber Division gave details of the Thanatos virus and how to handle it in a statement on Twitter yesterday.
"The FBI is aware of rising ransomware threat," they said. "If you are a victim, contact your local law enforcement office or submit a tip online."
They added, "The FBI encourages victims to report internet crime to the www.IC3.gov regardless of the dollar loss. Ransomware victims can also visit: www.stopransomware.gov to report the incident to CISA and learn more about available resources."
The FBI said the virus should be treated as a high priority incident, and urges anyone affected to contact them.
