Storm-0324 (8cb6f57b-9ebb-45a6-a89f-9efdb8065d70)
The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Storm-0324 (8cb6f57b-9ebb-45a6-a89f-9efdb8065d70) | Threat Actor | JSSLoader (5db89188-568d-40d2-9320-5fb4a06fbd51) | Malpedia | 1 |