Storm-0324
Also reported as DEV-0324, Sagrid and TA543.
Reports per quarter
CVEs named in reports
- CVE-2018-13379 KEV ransomware
- CVE-2019-0604 KEV ransomware
- CVE-2019-11510 KEV ransomware
- CVE-2019-19781 KEV ransomware
- CVE-2020-10189 KEV
- CVE-2020-8243 KEV
- CVE-2020-8260 KEV
- CVE-2021-20016 KEV ransomware
- CVE-2021-22893 KEV ransomware
- CVE-2021-22894 KEV
- CVE-2021-22899 KEV
- CVE-2021-22900 KEV
Show all 18 CVEs Show fewer
- CVE-2021-31207 KEV ransomware
- CVE-2021-40444 KEV ransomware
- CVE-2021-44228 KEV ransomware
- CVE-2022-30190 KEV ransomware
- CVE-2023-21715 KEV
- CVE-2025-10035 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Chapter 1 — From Gozi to ISFB- The history of a mythical malware family.
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Chapter 1 — From Gozi to ISFB- The history of a mythical malware family.
-
Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Ransomware-as-a-service- Understanding the cybercrime gig economy and how to protect yourself
-
JSSLoader- Recoded and Reloaded
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor JSSLoader- Recoded and Reloaded
-
RM3 – Curiosities of the wildest banking malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor RM3 – Curiosities of the wildest banking malware
Show all 12 reports Show fewer
Newest first. Details opens the report in Explore.