Actor / Malware Family
Storm-0940
1 query tagged with this actor.
-
Analytics Rules / Password Spray
Detect Low And Slow Password Spray
Low-and-slow spray pattern (Storm-0940-shaped): many unique users from the *same* IP in a day, with roughly one failed attempt per user; includes optional legacy-user-agent hints.