GINC-APT-0968 · Targeted, sponsor unknown

Storm-1099

Category
Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin
Russia(high confidence)
Sources
3 sources carry it
Identifier
GINC-APT-0968 · storm-1099

What it is

Storm-1099 is a sophisticated Russia-affiliated influence actor that has been conducting pro-Russia influence operations targeting international supporters of Ukraine since Spring 2022. They are known for their website forgery operation called "Doppelganger" and have been actively spreading false information. They have been involved in pushing the claim that Hamas acquired Ukrainian weapons for an attack on Israel. Storm-1099 has also been implicated in amplifying images of graffiti in Paris, suggesting possible Russian involvement and aligning with Russia's Active Measures playbook.

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Sources

  • Malpedia malpedia.caad.fkie.fraunhofer.de