Storm-1674

Reports: 4
Last reported: 6 April 2026
Known CVEs: 1

ID: storm-1674
Sources: MISP Malpedia Microsoft
Merge evidence: 2 alias matches

Reports per quarter

2021 Q2: 1 report
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: 1 report
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: no reports
2024 Q4: 1 report
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: no reports
2025 Q4: no reports
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2021 Q2 to 2026 Q2.

CVEs named in reports

CVE-2021-43890 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

6 April 2026

Financially motivated threat actors misusing App Installer | Microsoft Security Blog

date ORKL added it fromORKL

Archived copy on ORKL Detailsfor Financially motivated threat actors misusing App Installer | Microsoft Security Blog
15 October 2024

Phish, Click, Breach: Hunting for a Sophisticated Cyber Attack

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Phish, Click, Breach: Hunting for a Sophisticated Cyber Attack
30 December 2023

Rewterz Threat Alert - Widely Abused MSIX App Installer Disabled by Microsoft – Active IOCs - Rewterz

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Rewterz Threat Alert - Widely Abused MSIX App Installer Disabled by Microsoft – Active IOCs - Rewterz
7 May 2021

What is ransomware?

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor What is ransomware?

Newest first. Details opens the report in Explore.