Loading threat actor…
Storm-2077, also tracked as TAG-100 and UNK_ColtCentury, is a China-aligned cyber espionage threat cluster associated with targeted social-engineering activity against Taiwan’s semiconductor ecosystem. The actor has been observed targeting legal personnel at Taiwanese semiconductor organizations, using benign conversation-starter emails and trust-building outreach as a precursor to malware delivery. Reported follow-on payloading was assessed as likely intended to deploy the SparkRAT remote access trojan. The cluster’s activity fits a broader pattern of Chinese state-sponsored collection against strategically important semiconductor organizations and related entities, with the apparent objective of gathering intelligence relevant to technology development, supply chains, business operations, and sector strategy. High-confidence reporting links the actor to phishing-based initial access and subsequent post-compromise remote access via SparkRAT. Known aliases include TAG-100 and Storm-2077.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
Attributed origin per open-source reporting.
1 malware family Mallory has associated with this actor across public reporting.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.