[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQUAlBTGj78kBBZgEOa7Id_4OWwMVw2lkFA2rTyNG6SQ":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":10,"country":11,"suspected_sponsor":12,"target_industries":13,"target_countries":14,"incident_types":15,"references":16,"techniques":19,"technique_count":20,"created_at":21,"seoMetadata":22,"schemaOrg":26},"Storm-1084","storm-1084",[9],"DEV-1084","Storm-1084 is a threat actor that has been observed collaborating with the MuddyWater group. They have used the DarkBit persona to mask their involvement in targeted attacks. Storm-1084 has been linked to destructive actions, including the encryption of on-premise devices and deletion of cloud resources. They have been observed using tools such as Rport, Ligolo, and a customized PowerShell backdoor. The extent of their autonomy or collaboration with other Iranian threat actors is currently unclear.","IR",null,[],[],[],[17,18],"https:\u002F\u002Fcircleid.com\u002Fposts\u002F20230824-signs-of-muddywater-developments-found-in-the-dns","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2023\u002F04\u002F07\u002Fmercury-and-dev-1084-destructive-attack-on-hybrid-environment\u002F",[],0,"2024-02-02T02:15:03.218569+00:00",{"title":23,"metaDescription":24,"keywords":25},"Storm-1084 Threat Actor Profile | EdgeProtect","Storm-1084 is a threat actor that has been observed collaborating with the MuddyWater group. They have used the DarkBit persona to mask their involvem...","Storm-1084, DEV-1084, threat actor, APT, cyber threat, threat intelligence, IR",{"@context":27,"@type":28,"name":6,"alternateName":29,"description":10,"url":30,"mainEntityOfPage":31,"location":33},"https:\u002F\u002Fschema.org","Organization",[9],"https:\u002F\u002Fdev.precursorintelligence.com\u002Fthreat-actors\u002Fstorm-1084",{"@type":32,"@id":30},"WebPage",{"@type":34,"name":11},"Country"]