Storm-0249 Abusing EDR Process Via Sideloading to Hide Malicious Activity

Storm-0249, once known primarily as a mass phishing group, has undergone a significant transformation into a sophisticated initial access broker specializing in precision attacks. This evolution marks a critical shift in threat tactics, moving away from noisy phishing campaigns toward stealthy, post-exploitation techniques designed to deliver ransomware-ready access to criminal affiliates. The threat actor now […]

The post Storm-0249 Abusing EDR Process Via Sideloading to Hide Malicious Activity appeared first on Cyber Security News.