Storm-0940

MISP

Tipo:
Unknown

Paese:
CN

Prima attivita:
Unknown

Dettagli:

Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks.

Riferimenti (1)

microsoft.com - Chinese Threat Actor Storm 0940 Uses Credentials From Password Spray Attacks From A Covert Network

Alias (214)

CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07 CovertNetwork-1658 ORB07

Metadata

ID:	787
Created:	13/01/2026 17:48
Updated:	08/03/2026 04:00