Dust Storm
G0031
Threat actors behind the Operation Dust Storm have been active since at least 2010, the hackers targeted several organizations in Japan, South Korea, the US, Europe, and other Asian countries.
source: misp-galaxy3 refs →
Dust Storm
Dust Storm (G0031) is known for long-term espionage targeting Japan, South Korea, the US, and Europe since at least 2010.
Analyst brief
Dust Storm (G0031) is a threat actor of unknown origin active since at least 2010. The group has primarily targeted organizations in Japan, South Korea, the US, Europe, and other Asian countries. While specific TTPs and tools associated with 'Operation Dust Storm' are not detailed in the provided data, their long-term, geographically dispersed espionage activity must be noted. Defenders should enhance monitoring for suspicious network traffic and signs of long-term persistence, particularly targeting entities in Japan, South Korea, the US, and Europe.
unknown
FAQ2
Which geographic regions have been primarily targeted by Dust Storm (G0031)?
They have targeted organizations in Japan, South Korea, the US, Europe, and other Asian countries.
Since at least what year has the Dust Storm group been active?
Dust Storm (G0031) has been active since at least 2010.
See also6
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.