Storm-1167 is a threat actor tracked by Microsoft, known for their use of an AiTM phishing kit. They were responsible for launching an attack that led...

Threat Actor Profile

Storm-1167

State-sponsored threat group originating from ID.

Real-Time Alerts

Actor Overview

Origin Country
ID

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on Storm-1167 is published.

Actor Details

Primary Name
Storm-1167
Known Aliases
DEV-1167
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →