SYMBOLCOMMON_NAMEaka. SYNONYMS

Storm-0324  (Back to overview)

aka: DEV-0324, Sagrid, TA543

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.


Associated Families

There are currently no families associated with this actor.


References
2023-09-12MicrosoftMicrosoft Threat Intelligence
Malware distributor Storm-0324 facilitates ransomware access
JSSLoader Storm-0324
2021-06-24ProofpointCrista Giering, Dennis Schwarz, Matthew Mesa
JSSLoader: Recoded and Reloaded
JSSLoader Storm-0324

Credits: MISP Project