🕵️ Storm-0940
Named by 6 kept items in this workspace.
4 items name it under classification.key entities and 2 under threat actors.
Search every workspace for Storm-0940. It matches the name as written, so it can find other things that share it.
The items that name it 6
articleas classification.key entities2026-10-29
writeupas threat actors2026-10-29It is written here as Storm-0940 (China-state-aligned threat actor; Microsoft attributed the ConnectWise Cloud Backup supply-chain compromise to it; ARTEX used for reconnaissance, password spraying and OAuth application abuse; sign-in attempts against more than 2,250 tenants, privileged cloud access in under three hours in multiple cases).
China-state-aligned threat actor; Microsoft attributed the ConnectWise Cloud Backup supply-chain compromise to it; ARTEX used for reconnaissance, password spraying and OAuth application abuse; sign-in attempts against more than 2,250 tenants, privileged cloud access in under three hours in multiple
writeupas classification.key entities2026-10-26
articleas classification.key entities2026-10-23
articleas threat actors2026-10-22It is written here as Storm-0940 (overlapping with an unnamed ARTEX-using actor tracked by Wiz Research; targeted IT and software vendors in October 2026).
overlapping with an unnamed ARTEX-using actor tracked by Wiz Research; targeted IT and software vendors in October 2026
writeupas classification.key entities2026-10-21
All threat actors in this workspace.