Threat Actor
Storm-2945
- First Reported
- Aug 11, 2026
- Latest Reported
- Aug 20, 2026
Reported Context (2)
- Alternate name explicitly given for UNC7005. Google Details Russian Espionage Clusters Abusing Authentication Flows to Target Individuals
- Microsoft attributes CaptiveCrunch to Storm-2945, described as a sub-cluster of Midnight Blizzard. Midnight Blizzard-Linked Campaign Abuses Hotel Wi-Fi Portals to Steal Microsoft 365 Credentials
Malware (8)
People (2)
Threat Actors (6)
MITRE ATT&CK (10)
Vendors (3)
Products (8)
Industries (10)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.