Wired has their own take on it (https://www.wired.com/story/hacker-naming-schemes-spandex-tempest/ https://www.wired.com/story/hacker-naming-schemes-spandex-te.

Wired has their own take on it (https://www.wired.com/story/hacker-naming-schemes-spandex-tempest/ https://www.wired.com/story/hacker-naming-schemes-spandex-te...) where they actually interview the team that made this change. The overall scheme was driven by wanting more searchable names (I guess even threat intel needs SEO) but as for how they choose them... it feels like a fun way to personalize. FTA: `“There’s some origin story to each one,” Lambert says, “or it could just be a name out of a hat.”` Also closes with this banger of a paragraph: Until then, well, just watch out for Periwinkle Tempest. Last year, Periwinkle Tempest launched crippling ransomware attacks across the entire nation of Costa Rica, leading the country's government to declare a national emergency. Periwinkle Tempest are some of the most dangerous hackers in the world. Periwinkle Tempest. Seriously.