Storm-0530, identified also as DEV-0530 and H0lyGh0st, is a North Korean state-sponsored threat actor first observed in June 2021. This group primarily focuses on financially motivated operations, using its custom H0lyGh0st ransomware to target small and mid-sized businesses (SMBs) globally. This targeting strategy distinguishes Storm-0530 from many other state-sponsored groups that typically concentrate on larger, higher-profile entities for espionage, though its activities contribute to North Korea's economic objectives.

Aliases del actor

DEV-0530H0lyGh0st

Actores similares

devmanransomware · 184stormousransomware · 177crimson-sandstormactor · 1Network Devicesactor · 1Compromise Software Dependencies and Development Toolsactor · 1Device Driver Discoveryactor · 1Storm-1811actor · 1Storm-0501apt · 1Dust Stormapt · 1CS FQL: 32. Detect Data Exfiltration via external storage devicesactor · 1