Threat Intelligence / Actor / Storm-1811 / Blitz Brigantine

Storm-1811 / Blitz Brigantine

Nation: Russia · 1 tracked threat(s) · Categories: RANSOMWARE

Also known as: Storm-1811, STAC5777, Blitz Brigantine

Tracked threats

A0Backdoor via Microsoft Teams Social Engineering — Storm-1811/STAC5777 DNS MX C2 Covert Channel — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence