Storm-1811
Storm-1811 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 13 sectors, including Government and Technology, in 15 countries, including the United States and the United Kingdom. It uses 63 MITRE ATT&CK techniques and exploits 63 known CVEs.
- Techniques
- 63
- Exploited CVEs
- 63
- Record updated
Who They Target.
About Storm-1811.
Storm-1811 is a financially-motivated entity linked to Black Basta ransomware deployment. Storm-1811 is notable for unique phishing and social engineering mechanisms for initial access, such as overloading victim email inboxes with non-malicious spam to prompt a fake "help desk" interaction leading to the deployment of adversary tools and capabilities.
Last updated Jul 27, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.