APT Explorer

All actors

Berry Sandstorm

Also reported as Storm-0852. Linked to Iran by one source.

Reports
1
Last reported
Origin
Iran
ID
berry-sandstorm
Sources
Microsoft
Merge evidence
0 alias matches

Reports per quarter

Dated reports, 2026 Q2 to 2026 Q2.

Reports

  1. https://raw.githubusercontent.com/microsoft/mstic/master/PublicFeeds/ThreatActorNaming/MicrosoftMapping.json

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.