Cybercrime
Storm-0324
Storm-0324 is classified as cybercrime.
- Type
- Cybercrime
- Also known as
- 3
The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.
Also known as: DEV-0324, Sagrid, TA543
Published reports on this actor:
- https://www.microsoft.com/en-us/security/blog/2023/09/12/malware-distributor-storm-0324-facilitates-ransomware-access/
- https://www.proofpoint.com/us/blog/threat-insight/jssloader-recoded-and-reloaded
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.