Uptime Hamster: 113d 3h 19mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza Dust Storm

Dust Storm

1 incidentes 1 paises 1 sectores apt CN Ultimo: 2026-05-25
Aliases: G0031
Ver en IntelTracker → APTTrail →
Dust Storm is a nation-state sponsored cyber espionage group active since at least 2010, also tracked by MITRE as G0031. Its primary motivation is long-term data exfiltration and theft from targeted entities. The group is characterized by its long-term persistence, use of custom malware, and exploitation of zero-day vulnerabilities. While initially targeting government and defense sectors, by 2015, Dust Storm shifted its focus to Japanese critical infrastructure and incorporated Android backdoors into its operations. The group maintains strong operational security, which complicates attribution and tracking.

Aliases del actor

G0031

Actores similares

stormousransomware · 177storm-cloudactor · 1stardust-chollimaactor · 1unc1549-crimson-sandstormactor · 1smoke-sandstorm-cuboid-saactor · 1dustyskyactor · 1industroyeractor · 1apt-marbleddustactor · 1crimson-sandstormactor · 1Storm-1811threat-actor · 1
Motivacion
Information theft and espionage
Tecnicas MITRE
T1059.001, T1071.001, T1027, T1566.001
CVEs relacionadas
CVE-2025-53771, CVE-2025-53770, CVE-2025-49706, CVE-2025-49704, CVE-2025-29824, CVE-2025-29791
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

JapanKorea, Republic ofUnited States

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

MiningEnergy & Utilities Transportation&WarehousingFinanceOil & GasConstruction of BuildingsConstruction