4 ms·
At least for the "Midnight Blizzard" part of the title, it's the result of a naming framework [0] for threat actors that Microsoft has been using since April 20
by chatmasta 3y ago
At least for the "Midnight Blizzard" part of the title, it's the result of a naming framework [0] for threat actors that Microsoft has been using since April 2023. I agree it sounds weird.
[0] https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming https://learn.microsoft.com/en-us/microsoft-365/security/int...
- jstarfish 3y agoThe naming framework for these groups isn't even consistent, with every vendor having their own scheme. Midnight Animal to one vendor is Dancing Bear to another and known by Wet Cat to yet another. They all sound like bad translations to bargain-bin porno movies.
- true_religion 3y agoI’m not aware of another company that uses a naming framework.
- ivlad 3y agoCrowdstrike. FireEye.
- true_religion 3y agoDefinitely agree that Crowdstrikes naming veers past what is necessary. They even draw up supervillain graphics for them. https://www.crowdstrike.com/adversaries/arcane-kitten/ https://www.crowdstrike.com/adversaries/arcane-kitten/
- jrowen 3y agoThis is wild. Ethereal Panda? Labyrinth Chollima?! Why are we modelling threat actors/"adversaries" as a video game bestiary? Or meteorological phenomena in the case of MS?
- tempestn 3y agoWhy not?
- PoignardAzur 3y agoThis is really cool and incredibly stupid. Like, who is this made to appeal to? Is this meant to make corporate executive browsing for cybersecurity solutions feel like they're in a spy movie?
- travoc 3y agoCybersecurity professionals, in general, eat this stuff up.
- riversflow 3y agoper that link: Midnight Blizzard == Cozy Bear[1] who were in the US news. [1] https://en.wikipedia.org/wiki/Cozy_Bear https://en.wikipedia.org/wiki/Cozy_Bear