Storm-1567
No sourced public emblem in this profile.
reference profile · reported nexus: Unknown (not nationality)
Storm-1567 is the threat actor behind the Ransomware-as-a-Service Akira. They attacked Swedish organizations in March 2023. This ransomware utilizes the ChaCha encryption algorithm, PowerShell, and Windows Management Instrumentation (WMI). Microsoft's Defender for Endpoint successfully blocked a large-scale hacking campaign carried out by Storm-1567, highlighting the effectiveness of their security solution.
Source-reported aliases: Akira, PUNK SPIDER, GOLD SAHARA. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://securelist.com/crimeware-report-fakesg-akira-amos/111483/
https://www.trellix.com/en-us/about/newsroom/stories/research/akira-ransomware.html
https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape
https://decoded.avast.io/threatresearch/avast-q2-2023-threat-report/