Feed / Defender
highDefendersecurity advisoryms_security_blog · Sep 24, 2026
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
This advisory highlights the consistent tradecraft of Storm-2570, a ransomware affiliate, to help defenders detect and disrupt their activities before ransomware deployment.
“Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment. The post Beyond the rans”
View original article →Security
threat_protectionendpoint_security
Audience
adminsecurity_engineer
Environment
cloudon_premises
Classification confidence: 90%
Loading correlations…