Threat Actor
Storm-2949
- First Reported
- May 19, 2026
- Latest Reported
- May 21, 2026
Reported Context (2)
- Microsoft attributed an attack involving social engineering, cloud access, and data exfiltration to Storm-2949. Cybersecurity Roundup: 47 Zero-Days, Cloud Intrusions and AI-Driven Attacks
- Microsoft tracks Storm-2949 as a threat actor. Microsoft reports that the group used social engineering and compromised identities to steal sensitive data from Microsoft 365 and Azure environments; Microsoft notes that Storm is a temporary designation for developing or not-yet-classified threat activity. Microsoft Says Storm-2949 Abused SSPR in Azure Data-Theft Attacks
CVE (2)
Malware (10)
People (5)
Threat Actors (7)
MITRE ATT&CK (23)
Vendors (10)
Products (29)
Tools (2)
Industries (2)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.