Signalis
sign in--:--:--UTC
Threat actors

Stormous

Reports
18
First seen
Nov 1
Last seen
Jun 24
Motivation
financial, extortion, financial extortion

Targeting

Sectors
government ×3other ×3retail ecommerce ×3technology ×1financial services ×1
Victim regions
Malaysia ×3Netherlands ×2Australia ×2Vietnam ×1Italy ×1

Top ATT&CK techniques

T1566 Phishing ×1T1486 Data Encrypted for Impact ×1T1005 Data from Local System ×1T1489 Service Stop ×1T1547 Boot or Logon Autostart Execution ×1T1505.003 Web Shell ×1T1566.002 Phishing: Spearphishing Link ×1T1070.001 Indicator Removal: Clear Windows Event Logs ×1T1190 Exploit Public-Facing Application ×1T1598 Phishing for Information ×1

Indicators

domain ×22cve ×3ip_v4 ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2021-26829 (exploited)CVE-2025-27915 (exploited)CVE-2025-41244 (exploited)

Recent reports

High

Stormous publishes mlit.com.my as new victim with full data dump

ransomware.liveHigh

Stormous publishes jaggroup.com as ransomware victim

ransomware.liveMedium

Stormous ransomware gang publishes new victim

ransomware.liveHigh

Stormous ransomware gang publishes Lorenzoni Store as victim

ransomware.liveHigh

Stormous claims new victim: montechiaro-store.com

ransomware.liveHigh

Stormous ransomware gang publishes impulso-store.com as victim

ransomware.liveHigh

Stormous publishes jaggroup.com as ransomware victim with full data dump

ransomware.liveHigh

Stormous ransomware gang publishes victim mlit.com.my with 10GB data dump

ransomware.liveCritical

Stormous publishes MLIT breach: Malaysia government IT ministry compromised

ransomware.liveHigh

Stormous claims new victim: katholiekamersfoort.nl

ransomware.liveHigh

Stormous ransomware gang publishes sa2000.com victim data

ransomware.liveMedium

Stormous claims victim SA2000.COM on ransomware.live

ransomware.liveMedium

Stormous ransomware gang publishes katholiekamersfoort.nl as victim

ransomware.liveHigh

Stormous ransomware gang claims breach of VSP Solutions Australia

ransomware.liveHigh

Stormous ransomware gang claims breach of TTT Company (ttt.vn); 5TB data exfiltrated

ransomware.liveHigh

Stormous ransomware gang claims VSP Solutions Australia victim

ransomware.liveHigh

Stormous ransomware gang publishes ARC Reins and Fidelity United data breach

ransomware.liveHigh

Cyber Brief October 2025 – Espionage, Disruption, Data Breaches, and Supply Chain Threats

CERT-EU Threat Intel

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans