Storm-2077

Also reported as TAG-100 and RedNovember. Linked to China by four sources.

Reports: 8
Last reported: 29 April 2026
Known CVEs: 13
Origin: China

ID: storm-2077
Sources: MISP ETDA Malpedia Microsoft
Merge evidence: 7 alias matches

Reports per quarter

2019 Q1: 1 report
2019 Q2: no reports
2019 Q3: no reports
2019 Q4: no reports
2020 Q1: no reports
2020 Q2: no reports
2020 Q3: no reports
2020 Q4: no reports
2021 Q1: no reports
2021 Q2: no reports
2021 Q3: no reports
2021 Q4: no reports
2022 Q1: no reports
2022 Q2: no reports
2022 Q3: no reports
2022 Q4: no reports
2023 Q1: no reports
2023 Q2: no reports
2023 Q3: no reports
2023 Q4: no reports
2024 Q1: no reports
2024 Q2: no reports
2024 Q3: 2 reports
2024 Q4: 1 report
2025 Q1: no reports
2025 Q2: no reports
2025 Q3: 2 reports
2025 Q4: 1 report
2026 Q1: no reports
2026 Q2: 1 report

Dated reports, 2019 Q1 to 2026 Q2.

CVEs named in reports

CVE-2018-0171 KEV
CVE-2019-9621 KEV
CVE-2024-24919 KEV ransomware
CVE-2024-3400 KEV ransomware
CVE-2024-43451 KEV
CVE-2025-29824 KEV ransomware
CVE-2025-32433 KEV
CVE-2025-49704 KEV ransomware
CVE-2025-49706 KEV ransomware
CVE-2025-53770 KEV ransomware
CVE-2025-53771
CVE-2025-6218 KEV

Show all 13 CVEs Show fewer

CVE-2025-8088 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

29 April 2026

SparkRAT (Malware Family)

date ORKL added it fromORKL

The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor SparkRAT (Malware Family)
1 December 2025

APT and financial attacks on industrial organizations in Q3 2025 | Kaspersky ICS CERT EN

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor APT and financial attacks on industrial organizations in Q3 2025 | Kaspersky ICS CERT EN
24 September 2025

Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
16 July 2025

Phish and Chips: China-Aligned Espionage Actors Ramp Up Taiwan Semiconductor Industry Targeting | Proofpoint US

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Phish and Chips: China-Aligned Espionage Actors Ramp Up Taiwan Semiconductor Industry Targeting | Proofpoint US
22 November 2024

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON | Microsoft Security Blog

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON | Microsoft Security Blog
16 July 2024

TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental Bodies

Malpedia library date Insikt Group® by Recorded Future® fromORKL

Archived copy on ORKL Detailsfor TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental Bodies
16 July 2024

TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental Bodies | Recorded Future

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor TAG-100 Uses Open-Source Tools in Suspected Global Espionage Campaign, Compromising Two Asia-Pacific Intergovernmental Bodies | Recorded Future
22 March 2019

AZORult++: Rewriting history

Malpedia library date fromORKL

Archived copy on ORKL Detailsfor AZORult++: Rewriting history

Newest first. Details opens the report in Explore.