Storm-0464

Storm-0464 is a financially motivated cybercriminal threat actor associated with malware distribution activity. Public reporting in this context identifies the actor as a QakBot distributor that later shifted to delivering DarkGate and IcedID. The actor is part of the broader access-broker and malware-delivery ecosystem in which initial infection activity is monetized through delivery of commodity loaders and banking malware that can enable downstream intrusion activity. Storm-0464 has been linked to malware delivery operations rather than a distinct ransomware brand. Its observed role aligns with initial access and post-delivery enablement for follow-on criminal operations. The actor’s tooling history indicates use of established malware families commonly leveraged for credential theft, payload staging, persistence, and broader post-compromise activity. High-confidence details beyond the actor’s malware-distribution role and transition from QakBot to DarkGate and IcedID are not available in the supplied facts.