VN

Storm-1152Storm-1152

Also known as: Storm-1152

Origin
VN
Known aliases
1

Profile

Storm-1152, a cybercriminal group, was recently taken down by Microsoft for illegally reselling Outlook accounts. They operated by creating approximately 750 million fraudulent Microsoft accounts and earned millions of dollars in illicit revenue. Storm-1152 also offered CAPTCHA-solving services and was connected to ransomware and extortion groups. Microsoft obtained a court order to seize their infrastructure and domains, disrupting their operations.

Aliases· 1

Storm-1152

References

  1. https://securityboulevard.com/2023/12/microsoft-storm-1152-crackdown-stopping-threat-actors/
  2. https://blogs.microsoft.com/on-the-issues/2023/12/13/cybercrime-cybersecurity-storm-1152-fraudulent-accounts/
  3. https://www.rewterz.com/rewterz-news/rewterz-threat-update-microsoft-warns-of-emerging-threat-by-storm-0539-behind-gift-card-frauds/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Storm-1286
Actor
Storm-1283
Actor
Storm-1167
Actor
Storm-2372
Actor
Storm-1295
Actor
Storm-1133
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.