The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.
Also known as
DEV-0324, Sagrid, TA543.
References
Actor metadata imported from Malpedia (Fraunhofer FKIE).