Storm-0530

2023-04-18 • MicrosoftHow Microsoft names threat actors

Storm-0530 is a Microsoft developmental tracking designation for North Korean threat activity also known as DEV-0530 and H0lyGh0st. In Microsoft's taxonomy, Storm-numbered names are assigned to clusters that remain under development before a permanent weather-themed name is established.

Related Actors

First seen: Jul 2017
Last seen: Jun 2026

Related Reports

Top Authors

View all reports in this cluster

View all reports in this cluster