Storm-1567Storm-1567
Also known as: Akira · PUNK SPIDER · GOLD SAHARA · Storm-1567
Known aliases
4
Profile
Storm-1567 is the threat actor behind the Ransomware-as-a-Service Akira. They attacked Swedish organizations in March 2023. This ransomware utilizes the ChaCha encryption algorithm, PowerShell, and Windows Management Instrumentation (WMI). Microsoft's Defender for Endpoint successfully blocked a large-scale hacking campaign carried out by Storm-1567, highlighting the effectiveness of their security solution.
Aliases· 4
AkiraPUNK SPIDERGOLD SAHARAStorm-1567
References
- https://news.sophos.com/en-us/2023/12/20/cryptoguard-an-asymmetric-approach-to-the-ransomware-battle/
- https://securelist.com/crimeware-report-fakesg-akira-amos/111483/
- https://www.trellix.com/en-us/about/newsroom/stories/research/akira-ransomware.html
- https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape
- https://decoded.avast.io/threatresearch/avast-q2-2023-threat-report/
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.