Threat Group: Storm-0856 (Roshtyak)
Threat Type: Initial Access Broker (IAB), Malware Loader, USB Worm
Exploited Vulnerabilities: CVE-2023-36802, CVE-2023-29360
Malware Used: Raspberry Robin (aka Roshtyak, QNAP worm)
Threat Score: 🔴 High (8.4/10) – Ongoing use by ransomware groups and Russian state-backed actors, with evolving delivery techniques and C2 infrastructure.
Last Threat