🇳🇬
Storm-2246
APT Group
Also Known As
No alias recordedTarget Countries 3
Countries highlighted in red
Australia
Nigeria
United States
Sectors Targeted
Multiple
Healthcare
Insurance Carriers and Related Activities
524
Multiple sectors
Other Services (except Public Administration)
81
Monetary Authorities-Central Bank
521
Other Information Services
519
Health Care and Social Assistance
62
Technology
Information
51
tax services)
Computer and Electronic Product Manufacturing
334
Software Publishers
5112
Crypto
Finance and Insurance
52
NAICS:31
31
Professional, Scientific, and Technical Services
54
Administrative and Support and Waste Management and Remediation Services
56
Multiple Sectors
Public Administration
92
Finance
Computer Systems Design Services
541512
Computer Systems Design and Related Services
5415
Government
Various (including healthcare
Hardware Manufacturing
332510
Administrative and Support Services
561
Financial
Commercial Banking
52211
Details
Origin
🇳🇬 NG
Last Updated
23 Oct 2025
MITRE ATT&CK 19
T1027 - Obfuscated Files or Information
T1036 - Masquerading
T1102 - Web Service
T1106 - Native API
T1110 - Brute Force
T1110.003 - MultiFactor Authentication Request Generation
T1528 - Steal Application Access Token
T1566 - Phishing
T1566.001 - Spearphishing Attachment
T1566.002 - Spearphishing Link
T1567 - Exfiltration Over Web Service
T1567.002 - Exfiltration to Cloud Storage
T1583 - Acquire Infrastructure
T1583.001 - Domain Registration
T1583.006 - Cloud Accounts
T1584.001 - Domains
T1588 - Obtain Capabilities
T1588.002 - Tool Development
T1598 - Phishing for Information