Skip to content

Incidents attributed to:

Storm-0324

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other thr

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.

Also known as

DEV-0324, Sagrid, TA543.

References


Actor metadata imported from Malpedia (Fraunhofer FKIE).