[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8muV5Ex4hUsv8DNWHRqr22xEwEx7sIwDSILDyyXnDYw":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":9,"country":10,"suspected_sponsor":10,"target_industries":11,"target_countries":12,"incident_types":13,"references":14,"techniques":17,"technique_count":18,"created_at":19,"seoMetadata":20,"schemaOrg":24},"Storm-1674","storm-1674",[],"Storm-1674 is an access broker known for using tools based on the publicly available TeamsPhisher tool to distribute DarkGate malware. Storm-1674 campaigns have typically relied on phishing lures sent over Teams with malicious attachments, such as ZIP files containing a LNK file that ultimately drops DarkGate and Pikabot. In September 2023, Microsoft observed handoffs from Storm-1674 to ransomware operators that have led to Black Basta ransomware deployment.",null,[],[],[],[15,16],"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2023\u002F12\u002F28\u002Ffinancially-motivated-threat-actors-misusing-app-installer\u002F","https:\u002F\u002Fwww.rewterz.com\u002Frewterz-news\u002Frewterz-threat-alert-widely-abused-msix-app-installer-disabled-by-microsoft-active-iocs\u002F",[],0,"2024-02-02T02:15:03.218569+00:00",{"title":21,"metaDescription":22,"keywords":23},"Storm-1674 Threat Actor Profile | EdgeProtect","Storm-1674 is an access broker known for using tools based on the publicly available TeamsPhisher tool to distribute DarkGate malware. Storm-1674 camp...","Storm-1674, threat actor, APT, cyber threat, threat intelligence",{"@context":25,"@type":26,"name":6,"alternateName":27,"description":9,"url":28,"mainEntityOfPage":29},"https:\u002F\u002Fschema.org","Organization",[],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fstorm-1674",{"@type":30,"@id":28},"WebPage"]