APT Explorer

All actors

Storm-0558

Also reported as Antique Typhoon. Linked to China by four sources.

Reports
9
Last reported
Known CVEs
6
Origin
China
ID
storm-0558
Sources
MISPETDAMalpediaMicrosoft
Merge evidence
4 alias matches

Reports per quarter

Dated reports, 2023 Q3 to 2026 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. https://raw.githubusercontent.com/microsoft/mstic/master/PublicFeeds/ThreatActorNaming/MicrosoftMapping.json

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. Compromised Microsoft Key: More Impactful Than We Thought

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Microsoft breach led to theft of 60,000 US State Dept emails

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Mitigation for China-based threat actor activity - Microsoft On the Issues

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. Microsoft Security Response Center Blog

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. Review of the Summer 2023 Microsoft Exchange Online Intrusion

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Microsoft Security Response Center Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

  8. Avast Q2/2023 threat report

    Malpedia library date ORKL

    Archived copy on ORKL Details

  9. Analysis of Storm-0558 techniques for unauthorized email access | Microsoft Security Blog

    Malpedia library date ORKL

    Archived copy on ORKL Details

Newest first. Details opens the report in Explore.