Stormous
ObscureIQ Threat Intelligence · Actor Profile
StormousConfidence: Medium
Ransomware
Motivation: Political / nation-state; Notoriety
1Attributed Breaches
MediumAttribution Confidence
RansomwareActor Type
Overview
An Arabic-speaking, pro-Russian ransomware and hacktivist group active since ~2021-2022, claiming attacks across 15+ countries (e.g. Coca-Cola and Mattel claims). Politically motivated, with a documented history of FALSE or exaggerated breach claims; one claim in this corpus was assessed as fabricated, so corroborate every attribution.
Tactics, Targeting & TTPs
Politically motivated; has a documented history of FALSE or exaggerated breach claims, so attributions require corroboration. In this corpus a Stormous claim was assessed as fabricated.
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.