Threat Actor
Storm-2990
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (3)
- Microsoft tracks the phishing-kit cluster and developers behind CoGUI, Haozi, and Iron Man System as Storm-2990. Microsoft Details Phishing-Kit Ecosystem Behind Billion-Message Campaigns
- Microsoft's tracking name for a cluster of Chinese-speaking threat actors that developed and sold the phishing kits. Microsoft and Partners Disrupt Chinese-Language Phishing Kit Network
- Microsoft's tracking name for the CoGUI, Haozi, and Iron Man System phishing kits. Global Takedown Disrupts Phishing Network Behind More Than 1 Billion Messages
People (1)
Threat Actors (1)
MITRE ATT&CK (13)
Vendors (7)
Products (9)
Tools (9)
Industries (6)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.