Storm-2949

No known aliases in database

▲ High Threat

Diplomatic Credential Harvesting

Origin Russia

Sponsor Russian Government

Motivation Cyber Espionage

Target Sectors

Government Diplomatic entities Critical Infrastructure European political organizations

Spear-phishing

Adversary-in-the-Middle (AiTM)

MFA Bypass

Credential Harvesting

Use of legitimate cloud services for hosting phishing pages

Social Engineering

CISA Advisories ↗

Hacking the mainframe…