Storm-0062

The cyberattack campaign that Microsoft uncovered was launched by a China-linked hacking group called Storm-0062. According to the company, the group is launching cyberattacks by exploiting a vulnerability in the Data Center and Server editions of Confluence. Those are versions of the application that companies run on-premises.

Qrupun mənşəyi Çin kimi bildirilir.

Digər adları: Oro0lxy, DarkShadow

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/monthly-news-november-2023/ba-p/3970796
• https://www.sentinelone.com/blog/the-good-the-bad-and-the-ugly-in-cybersecurity-week-41-5/
• https://twitter.com/MsftSecIntel/status/1711871732644970856

Mənbə: MISP Galaxy, Malpedia.