SYMBOLCOMMON_NAMEaka. SYNONYMS

Storm-0558  (Back to overview)


Storm-0558 is a China-based threat actor with espionage objectives. While there are some minimal overlaps with other Chinese groups such as Violet Typhoon (ZIRCONIUM, APT31), Microsoft maintain high confidence that Storm-0558 operates as its own distinct group

Associated Families

There are currently no families associated with this actor.

References
2024-03-20 ⋅ CISA ⋅ Cyber Safety Review Board
Review of the Summer 2023 Microsoft Exchange Online Intrusion
Storm-0558
2023-07-14 ⋅ Microsoft ⋅ Microsoft Threat Intelligence
Analysis of Storm-0558 techniques for unauthorized email access
Storm-0558
Credits: MISP Project