SYMBOLCOMMON_NAMEaka. SYNONYMS

Storm-0558  (Back to overview)


Storm-0558 is a China-based threat actor with espionage objectives. While there are some minimal overlaps with other Chinese groups such as Violet Typhoon (ZIRCONIUM, APT31), Microsoft maintain high confidence that Storm-0558 operates as its own distinct group

Associated Families

There are currently no families associated with this actor.

References
2024-03-20 ⋅ CISA ⋅ Cyber Safety Review Board
Review of the Summer 2023 Microsoft Exchange Online Intrusion
Storm-0558
2024-03-06 ⋅ Youtube (SANS Digital Forensics and Incident Response) ⋅ SANS Digital Forensics and Incident Response
SANS Threat Analysis Rundown (STAR) | Live Stream
Storm-0558
2023-07-21 ⋅ Wiz.io ⋅ Shir Tamari
Compromised Microsoft Key: More Impactful Than We Thought
Storm-0558
2023-07-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Analysis of Storm-0558 techniques for unauthorized email access
Storm-0558
2023-07-12 ⋅ Microsoft ⋅ Charlie Bell
Mitigation for China-based threat actor activity
Storm-0558
Credits: MISP Project