Storm-2372

☆ pin

Reports

First seen

May 4, 2026

Last seen

Aug 6, 2026

Motivation

Financial, Espionage

Targeting

Sectors

Other ×2

Top ATT&CK techniques

T1566 Phishing ×4T1021 Remote Services ×2T1598 Phishing for Information ×2T1486 Data Encrypted for Impact ×2T1528 Steal Application Access Token ×2T1566.002 Phishing: Spearphishing Link ×2T1195 Supply Chain Compromise ×2T1078 Valid Accounts ×1T1041 Exfiltration Over C2 Channel ×1T1190 Exploit Public-Facing Application ×1T1021.001 Remote Services: Remote Desktop Protocol ×1T1621 Multi-Factor Authentication Interception ×1

Indicators

cve ×11domain ×4filename ×2ip_v4 ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2025-21079 (exploited)CVE-2025-55182 (exploited)CVE-2025-58486 (exploited)CVE-2025-59528 (exploited)CVE-2025-7850 (exploited)CVE-2025-7851 (exploited)CVE-2026-20131 (exploited)CVE-2026-25177 CVE-2026-27912 CVE-2026-32201 (exploited)CVE-2026-35616 (exploited)

Recent reports

High

ThreatsDay: 30 Weekly Threat Roundup—RCE, Device Takeovers, Supply Chain, AI Abuse

The Hacker NewsAug 6, 2026 High

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

The Hacker NewsJul 7, 2026 High

Device Code Phishing Attacks Surge Across Multiple PhaaS Platforms

Huntress BlogJun 22, 2026 High

CERT-EU Cyber Brief April 2026 – Espionage, Supply-Chain Attacks, and Critical Infrastructure Threats

CERT-EU Threat IntelMay 4, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.