Microsoft unmasks ransomware affiliate Storm-2570, linking it to Qilin, DragonForce, Anubis & BERT payloads. The group uses a consistent playbook of RMM tools, ntdsutil, & Rclone, offering key detection points. #ThreatIntel #Ransomware #Storm2570 #Mi...

🌐 cyber[.]netsecops[.]io

Storm-2570 reuses attack blueprint across Qilin, Anubis & BERT—decrypt the behavior before encryption strike. #Ransomware #Storm2570 #Cybersecurity #DataBreach #ThreatIntel https://thedailytechfeed.com/microsoft-uncovers-storm-2570s-ransomware-playbook-across-multiple-malware-families/

@microsoft.com
Storm-2570 reuses RMM, credential theft, lateral movement, and cloud exfiltration tactics across ransomware affiliates.
-
IOCs: MeshAgent, Qilin, DragonForce
-
#Ransomware #Storm2570 #ThreatIntel