Storm-0978 attacks reveal financial and espionage motives | Microsoft Security Blog
Tags
country: Russia Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Email Account - T1087.003 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Security Account Manager - T1003.002 Server - T1583.004 Server - T1584.004 Social Media - T1593.001 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID e2740105-2514-4708-8b11-e5861ca5637c
Fingerprint b5112a134646cecf
Analysis status DONE
Considered CTI value 2
Text language
Published July 11, 2023, 10:30 a.m.
Added to db Aug. 12, 2023, 2:02 p.m.
Last updated Nov. 17, 2024, 5:57 p.m.
Headline Storm-0978 attacks reveal financial and espionage motives
Title Storm-0978 attacks reveal financial and espionage motives | Microsoft Security Blog
Detected Hints/Tags/Attributes 92/3/9
Source URLs
Redirection Url
Details Source https://www.microsoft.com/en-us/security/blog/2023/07/11/storm-0978-attacks-reveal-financial-and-espionage-motives/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 173 ✔ Microsoft Security Blog https://microsoft.com/security/blog/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 119 
cve-2023-36884
Details Domain 2 
advanced-ip-scaner.com
Details Domain 107 
aka.ms
Details Domain 1373 
twitter.com
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 17 
DEV-0978
Details Deprecated Microsoft Threat Actor Naming Taxonomy (Groups in development) 51 
DEV-0586
Details Microsoft Threat Actor Naming Taxonomy (Groups in development) 79 
Storm-0978
Details Url 22 
https://aka.ms/threatintelblog.
Details Url 15 
https://twitter.com/msftsecintel.