TAG-100, also known as RedNovember by Recorded Future and Storm-2077 by Microsoft, emerged in January 2024 as a cyber-espionage group assessed with high confidence to be sponsored by the Chinese state. The group's primary motivation is intelligence collection to advance Chinese geopolitical interests and military objectives. TAG-100 distinguishes itself through its rapid exploitation of newly disclosed vulnerabilities, often within days of public release, particularly targeting internet-facing edge devices such as VPNs and firewalls. They predominantly rely on open-source tools and legitimate offensive security frameworks to minimize operational costs, complicate attribution efforts, and maximize their operational impact. The group's activity has been tracked globally, compromising high-profile government and private sector organizations.

Aliases del actor

Storm-2077RedNovember

Actores similares

stormousransomware · 177storm-cloudactor · 1unc1549-crimson-sandstormactor · 1smoke-sandstorm-cuboid-saactor · 1tag-22actor · 1crimson-sandstormactor · 1Local Data Stagingactor · 1Lazarus Groupthreat-actor · 1Storm-1811threat-actor · 1Storm-0501threat-actor · 1