MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-22 23:07:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

[threat-actors] Add Storm-1283

Browse source
This commit is contained in:
Mathieu4141 2023-12-20 03:40:25 -08:00
parent 8ed4377844
commit a4c56efca8
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
clusters/threat-actor.json
View file

@ -13839,6 +13839,16 @@
},
"uuid": "f8054f5b-45e5-4624-b8d0-1b9c30aa084e",
"value": "BiBiGun"
},
{
"description": "Storm-1283 is a threat actor that targeted Microsoft Azure cloud platform. They gained access to user accounts and created OAuth applications using stolen credentials, allowing them to control resources and deploy virtual machines for cryptomining. The targeted organizations incurred significant financial losses ranging from $10,000 to $1.5 million. Storm-1283 utilized compromised accounts and subscriptions to carry out their illicit activities.",
"meta": {
"refs": [
"https://www.microsoft.com/en-us/security/blog/2023/12/12/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks/"
]
},
"uuid": "c9ffcc82-f7ac-46ce-9ea2-91e51d14e11b",
"value": "Storm-1283"
}
],
"version": 296