Threat actor · G1046

Storm-1811

UnattributedNo public state or group attribution on record

Storm-1811 is a financially-motivated entity linked to Black Basta ransomware deployment. Storm-1811 is notable for unique phishing and social engineering mechanisms for initial access, such as overloading victim email inboxes with non-malicious spam to prompt a fake "help desk" interaction leading to the deployment of adversary tools and capabilities.

MITRE ATT&CK Techniques

Associated Malware

BITSAdminBlack BastaCobalt StrikeImpacketPsExecQakBotQuick Assist

Full MITRE ATT&CK profile

0 recent articles mention this actor

No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.