← All Threat Actors
Threat Actor Profile

Storm

No known aliases in database
▲ High Threat
Storm-0706 Financial Phishing, Storm-0501 Malware Distribution
Origin
Motivation Financial gain (Fraud and Theft)

Target Sectors

Financial Services Corporate Finance Departments Small to Medium Enterprises (SMEs) Governmental Finance Agencies

Known TTPs

Adversary-in-the-Middle (AiTM) Phishing
Session Token Theft
MFA Fatigue and Bypass
OAuth Application Consent Phishing
Email Rule Manipulation for BEC
Living-off-the-Land Binaries (LotL)
Use of Legitimate Cloud Infrastructure for C2

External Resources

CISA Advisories ↗

LINK COPIED TO CLIPBOARD