Storm-1175 focuses gaze on vulnerable web-facing assets in high ...

Reported 06 Apr 2026 by otx · Severity: medium

The financially motivated cybercriminal actor tracked by Microsoft Threat Intelligence as Storm-1175 operates high-velocity ransomware campaigns that weaponize N-days, targeting vulnerable, web-facing systems during the window between vulnerability disclosure and widespread patch