Threat actorRussiaTracked since 2026-04

StormStealer

Also known as:Storm MaaSGunnar build operator

As of 2026-05-30, StormStealer is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as Storm MaaS, Gunnar build operator.

Tracked threats

11 high

First seen

2026-042026-04-13

Last seen

2026-042026-04-13

ATT&CK techniques

—No mapped techniques yet

Related CVEs

0None referenced

Attribution

RussiaNation or origin