The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection...
Actor Overview
Related Threat Reports
PremiumAPT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated
Get alerts when new intel on Storm-0324 is published.
Actor Details
Primary Name
Storm-0324
Known Aliases
DEV-0324, Sagrid, TA543
Data Source
Precursor Intelligence