BTCintel
nodeok
mempool78,542 tx
node next1.01 sat/vB
retarget33 blocks
chainmainnet

threat actor

Storm-1101

unknownentity:threat_actor

DEV-1101 is a threat actor tracked by Microsoft who is responsible for developing and advertising phishing kits, specifically AiTM phishing kits. These kits are capable of bypassing multifactor authentication and are available for purchase or rent by other cybercriminals. DEV-1101 offers an open-source kit with various enhancements, such as mobile device management and CAPTCHA evasion. Their tool has been used in high-volume phishing campaigns by multiple actors, including DEV-0928, and is sold

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id
storm-1101
kind
threat actor
status
unknown
aliases
DEV-1101
jurisdictions
—
claims naming it
0 · 0 attributions · 0 relations · 0 events

Identifiers

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.