ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Storm-0473
0 incidentes
0 paises
0 sectores
apt KZ Ultimo: -
Aliases: UNC2849
Storm-0473 is a cyber-espionage threat actor, also known by the alias UNC2849, that has been active since at least 2019. The group is assessed with high confidence to be of Kazakhstan-based origin. Their primary motivation is espionage, focusing on intelligence gathering likely aligned with national interests. A distinguishing characteristic of Storm-0473 is that its infrastructure was notably compromised by the Russian state-sponsored actor Turla (Secret Blizzard) in 2022, which then leveraged Storm-0473's Tomiris backdoor to deploy its own malware against Ukrainian networks.