Threat Actor
Storm-3069
- First Reported
- Sep 28, 2026
- Latest Reported
- Sep 29, 2026
Reported Context (2)
- Microsoft linked NeedyMantis to this threat actor, which it said is based in China; Microsoft did not link the actor to a Chinese nation-state group and has not concluded that all NeedyMantis deployments are associated with it. Microsoft Finds NeedyMantis Backdoor Used to Maintain Access to Targeted Networks
- Microsoft identifies Storm-3069 as a user of NeedyMantis and associates its activity with the DAEMON Tools supply chain compromise; Microsoft assesses the activity originates from China but has not attributed the actor to a Chinese nation-state. Microsoft details NeedyMantis malware used in targeted post-compromise operations
Malware (1)
People (1)
Threat Actors (1)
MITRE ATT&CK (9)
Vendors (1)
Products (15)
Tools (1)
Industries (5)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.