Storm-0249
Storm-0249 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 18 MITRE ATT&CK techniques.
- Techniques
- 18
- Exploited CVEs
- No CVE data
- Record updated
About Storm-0249.
An initial access broker (IAB) group tracked by Microsoft, known for exploiting endpoint detection mechanisms and trusted Microsoft Windows utilities to install malware and establish persistent access, typically as a precursor to ransomware operations.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.