From a6c451be2dc590174baac07456bfb6a2efc82496 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Thu, 1 Feb 2024 11:02:04 -0800
Subject: [PATCH] [threat-actors] Add Storm-0381

---
 clusters/threat-actor.json | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 578df6a..7776a1b 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -14599,6 +14599,20 @@
       },
       "uuid": "8081af2c-442f-4487-9cf7-022cbe010b8f",
       "value": "Storm-1101"
+    },
+    {
+      "description": "Storm-0381 is a threat actor identified by Microsoft as a Russian cybercrime group. They are known for their use of malvertising to deploy Magniber, a type of ransomware.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://www.microsoft.com/en-us/security/security-insider/microsoft-digital-defense-report-2023"
+        ],
+        "synonyms": [
+          "DEV-0381"
+        ]
+      },
+      "uuid": "874860fe-5aee-4c94-aee1-2166c225c41e",
+      "value": "Storm-0381"
     }
   ],
   "version": 298