stormous

Key insights

• •Stormous employs double extortion tactics, encrypting and threatening to leak sensitive data.
• •Targets include government, healthcare, energy, and telecommunications sectors.
• •The group utilizes both custom and publicly available tools, often exploiting unpatched vulnerabilities.
• •They primarily operate through a Ransomware-as-a-Service (RaaS) model.
• •Recent attacks include significant data breaches affecting hundreds of thousands of individuals.
• •Stormous claims alignment with Russian geopolitical interests and focuses on Western countries.