Storm-1295

MISP
Tipo:
Unknown
Paese:
Unknown
Prima attivita:
Unknown
Dettagli:

Storm-1295 is a threat actor group that operates the Greatness phishing-as-a-service platform. They utilize synchronous relay servers to present targets with a replica of a sign-in page, resembling traditional phishing attacks. Their adversary-in-the-middle capability allows Storm-1295 to offer their services to other attackers. Active since mid-2022, Storm-1295 is tracked by Microsoft and is known for their involvement in the Greatness PhaaS platform.

Alias (107)
DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295 DEV-1295
Metadata
ID: 596
Created: 13/01/2026 17:48
Updated: 08/03/2026 04:00