GINC-APT-0426 · Targeted, sponsor unknown

Oka Flood

Also Storm-1679.

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Russia(high confidence)
Sources
5 sources carry it
Identifier
GINC-APT-0426 · oka-flood

What it is

Storm-1679 is a Russian disinformation group believed to be a spinoff of the Internet Research Agency, actively engaged in influence operations targeting the International Olympic Committee and the 2024 Olympic Games. The group has employed AI-generated content, including deepfake videos and fabricated narratives about violence, to discredit the IOC and instill fear among potential attendees. Their campaigns have been identified across multiple languages and platforms, utilizing techniques such as impersonation of media outlets and the creation of disinformation websites. Microsoft attributes significant disinformation activities related to the Olympics to Storm-1679, highlighting their focus on spreading falsehoods and promoting anti-Olympics messaging.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Microsoft
Storm-1679

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Tools

The tools and malware families the sources tie to it.

  • CrossRat

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de