- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Unknown
- Sources
- 1 source carries it
- Identifier
- GINC-APT-1214 · storm-0844
What it is
Storm-0844 is a threat actor originally known for distributing Akira ransomware, and more recently, for distributing Fog ransomware. The actor gains initial access likely by abusing valid accounts, then uses freely available tools for discovery, lateral movement, and exfiltration prior to ransomware deployment.<sup>[Microsoft Threat Intelligence LinkedIn July 15 2024]</sup>