Storm Cloud

Storm Cloud is a Chinese espionage threat actor known for targeting organizations across Asia, particularly Tibetan organizations and individuals. They use a variety of malware families, including GIMMICK and GOSLU, which are feature-rich and multi-platform. Storm Cloud leverages public cloud hosting services like Google Drive for command-and-control channels, making it difficult to detect their activities.

Qrupun mənşəyi Çin kimi bildirilir.

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://www.volexity.com/blog/2020/03/31/storm-cloud-unleashed-tibetan-community-focus-of-highly-targeted-fake-flash-campaign/
• https://www.rewterz.com/rewterz-news/rewterz-threat-alert-gimmick-malware-active-iocs

Mənbə: MISP Galaxy, Malpedia.