Storm-0558
MISP
Type:
Nation-state
Nation-state
Country:
CN
CN
First seen:
Unknown
Unknown
Details:
Storm-0558 is a China-based threat actor with espionage objectives. While there are some minimal overlaps with other Chinese groups such as Violet Typhoon (ZIRCONIUM, APT31), Microsoft maintain high confidence that Storm-0558 operates as its own distinct group
References (8)
- microsoft.com - Analysis Of Storm 0558 Techniques For Unauthorized Email Access
- wiz.io - Storm 0558 Compromised Microsoft Key Enables Authentication Of Countless Micr
- msrc.microsoft.com - Results Of Major Technical Investigations For Storm 0558 Key Acquisition
- bsi.bund.de - Aktive Apt Gruppen Node
- blogs.microsoft.com - Mitigation China Based Threat Actor
- msrc.microsoft.com - Microsoft Mitigates China Based Threat Actor Storm 0558 Targeting Of Customer Email
- youtube.com - Watch
- cisa.gov - CSRB Review Of The Summer 2023 MEO Intrusion Final 508c.pdf
Metadata
| ID: | 434 |
| Created: | 13/01/2026 17:48 |
| Updated: | 13/10/2026 04:00 |