Storm-0324

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.

Digər adları: DEV-0324, Sagrid, TA543

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://www.microsoft.com/en-us/security/blog/2023/09/12/malware-distributor-storm-0324-facilitates-ransomware-access/
• https://www.proofpoint.com/us/blog/threat-insight/jssloader-recoded-and-reloaded

Mənbə: MISP Galaxy, Malpedia.