Storm-1084

Reports per quarter

CVEs named in reports

• CVE-2022-47966 KEV ransomware
• CVE-2022-47986 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 4 April 2024

   DarkBeatC2: The Latest MuddyWater Attack Framework

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor DarkBeatC2: The Latest MuddyWater Attack Framework

2. 24 August 2023

   Signs of MuddyWater Developments Found in the DNS

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Signs of MuddyWater Developments Found in the DNS

3. 5 June 2023

   Iran Cyber Threat Overview

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Iran Cyber Threat Overview

4. 7 April 2023

   MERCURY and DEV-1084- Destructive attack on hybrid environment

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor MERCURY and DEV-1084- Destructive attack on hybrid environment

5. 7 April 2023

   MERCURY and DEV-1084: Destructive attack on hybrid environment | Microsoft Security Blog

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor MERCURY and DEV-1084: Destructive attack on hybrid environment | Microsoft Security Blog

Newest first. Details opens the report in Explore.