Storm-1175
Storm-1175 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 16 MITRE ATT&CK techniques.
- Techniques
- 16
- Exploited CVEs
- No CVE data
- First seen
- Jul 30, 2024
- Last seen
- Oct 7, 2025
- Record updated
About Storm-1175.
A cybercrime group and known Medusa ransomware affiliate, also linked to attacks exploiting VMware ESXi vulnerabilities and deploying Akira and Black Basta ransomware.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.