All actors

Storm-0062

Also reported as Oro0lxy, DarkShadow and Shadow Typhoon. Linked to China by three sources.

Reports
6
Last reported
Known CVEs
12
Origin
China
ID
storm-0062
Merge evidence
6 alias matches

Reports per quarter

  1. 2021 Q2: 2 reports
  2. 2021 Q3: no reports
  3. 2021 Q4: no reports
  4. 2022 Q1: no reports
  5. 2022 Q2: no reports
  6. 2022 Q3: no reports
  7. 2022 Q4: no reports
  8. 2023 Q1: no reports
  9. 2023 Q2: no reports
  10. 2023 Q3: no reports
  11. 2023 Q4: 3 reports
  12. 2024 Q1: no reports
  13. 2024 Q2: 1 report
Dated reports, 2021 Q2 to 2024 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. An APT with no name

    date in the title fromORKL

Newest first. Details opens the report in Explore.