[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhbVRAU_P0k8gqtr64zTiQlEX9XklfBll8Ry2a9kQzvA":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":11,"target_industries":12,"target_countries":13,"incident_types":14,"references":15,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"Storm-0940","storm-0940",[],"Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks.","CN",null,[],[],[],[16],"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2024\u002F10\u002F31\u002Fchinese-threat-actor-storm-0940-uses-credentials-from-password-spray-attacks-from-a-covert-network\u002F",[],0,"2024-12-23T02:15:04.877712+00:00",{"title":21,"metaDescription":22,"keywords":23},"Storm-0940 Threat Actor Profile | EdgeProtect","Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as w...","Storm-0940, threat actor, APT, cyber threat, threat intelligence, CN",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29,"location":31},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fstorm-0940",{"@type":30,"@id":28},"WebPage",{"@type":32,"name":10},"Country"]