Storm-1099 is a sophisticated Russia-affiliated influence actor that has been conducting pro-Russia influence operations targeting international supporters of Ukraine since Spring 2022. They are known for their website forgery operation called "Doppelganger" and have been actively spreading false information. They have been involved in pushing the claim that Hamas acquired Ukrainian weapons for an attack on Israel. Storm-1099 has also been implicated in amplifying images of graffiti in Paris, suggesting possible Russian involvement and aligning with Russia's Active Measures playbook.
Executive Summary
Storm-1099 is a sophisticated Russia-affiliated influence actor conducting pro-Russia operations since Spring 2022. They use tactics like website forgery and false information campaigns, targeting those opposing Ukraine's supporters.
Goals & Targeting
Storm-1099 aims to sway public opinion and geopolitical dynamics through misinformation. Their targets include international supporters of Ukraine, media outlets, and activists susceptible to narrative shifts that favor Russian narratives.
Enhanced Description
Storm-1099 has been actively involved in shaping narratives to favor Russian interests, notably spreading claims that Hamas used Ukrainian weapons against Israel. Their 'Doppelganger' operation highlights a strategic approach to mimic legitimate websites, facilitating the spread of disinformation and creating distrust among opposing groups. They leverage social media amplification to push their agenda, aligning with Russia's broader influence strategies as seen in the Paris graffiti incident.
Key Capabilities
MITRE ATT&CK Tactics
ATT&CK Techniques
Software / Tooling
Campaigns & Victims
Known for campaigns like the Doppelganger sites and amplifying geopolitical claims, Storm-1099 operates with a strategic focus on timely narrative shaping during key events. Past operations include spreading disinformation related to Hamas-Ice relations and Russian involvement indicators.
IOC Patterns
Recommended Actions
Suggested Tags
Confidence Assessment
Confidence is moderate, with data gaps in exact TTPs and specific targets. Open-source intelligence and threat feeds could provide more insights.
No techniques linked yet.
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
No references recorded yet.
0
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
0
Tactics