Threat actor · G1053
Storm-0501
Storm-0501 is a financially motivated cyber criminal group that uses commodity and open-source tools to conduct ransomware operations. Storm-0501 has been active since 2021 and has previously been affiliated with Sabbath Ransomware and other Ransomware-as-a-Service (RaaS) variants such as Hive, BlackCat, Hunters International, LockBit 3.0, and Embargo ransomware.
ATT&CK techniques
42 mappedT1003T1003.006T1021.006T1021.007T1027.002T1036.004T1053.005T1057T1059.001T1059.009T1078.004T1082T1087.002T1087.004T1098.001T1098.003T1110T1190T1218.010T1218.011T1219.002T1482T1484.001T1484.002T1485T1486T1490T1518.001T1526T1530T1537T1552.004T1555.005T1555.006T1556.009T1567.002T1578.003T1580T1587.003T1588.006T1614.001T1657