Storm-0494

Reports per quarter

Techniques seen in the last two years

• T1003.003 1 report
• T1547.001 1 report

Counts come from technique IDs in the actor's report text.

Reports

1. 20 July 2026

   INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities

2. 19 May 2026

   Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomware

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomware

3. 19 May 2026

   Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs

4. 5 November 2025

   Gootloader | Threat Detection Overview | Huntress

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Gootloader | Threat Detection Overview | Huntress

5. 10 October 2024

   Lynx Ransomware: A Rebranding of INC Ransomware

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Lynx Ransomware: A Rebranding of INC Ransomware

6. 20 September 2024

   Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Cybersecurity News: INC targets healthcare, Providence schools cyberattack, Apple iPads bricked

7. 7 January 2024

   INC Linux Ransomware - Sandboxing with ELFEN and Analysis

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor INC Linux Ransomware - Sandboxing with ELFEN and Analysis

Newest first. Details opens the report in Explore.