Skip to content
CybercrimeFinancialAdvanced sophistication · Organisation

Storm-0501

Storm-0501 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 10 sectors, including Government and Technology, in 8 countries, including the United States and the United Kingdom. It uses 62 MITRE ATT&CK techniques and exploits 9 known CVEs.

Techniques
62
Exploited CVEs
9
First seen
Jan 1, 2021
Last seen
Aug 27, 2025
Record updated

Who They Target.

Labelsglobal

About Storm-0501.

Cybercriminal group known for opportunistic and financially motivated ransomware operations, active since 2021, targeting hybrid cloud environments. They also operate as a Ransomware-as-a-Service (RaaS) affiliate.

Last updated Jul 28, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.