Loading malware…
Stormous is a ransomware/extortion group tracked under the name Stormous. In the provided reporting, it appeared in ransomware victim-leak-site monitoring for 2025 and was assessed as active enough to be counted among groups responsible for individual incidents. The content states that Stormous revamped its data leak site (DLS), abandoned its previous practice of operating only at certain times, and increased activity by posting a large amount of information related to hotel and resort victims, indicating attacks against that sector. It also claimed to have attacked a German car manufacturer, but the reporting explicitly notes that no breach evidence was provided to support that claim. The available content does not provide technical details on malware functionality, infection vector, encryption behavior, specific tooling, or indicators of compromise. No high-confidence threat-actor attribution beyond the Stormous name itself is provided in the source material.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
14 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Full values are available in Mallory.
IPs, domains, and DNS infrastructure linked to this family.
Other indicator types observed in public reporting.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Ransomware operation referenced as minimal activity in Q2 2025 (no additional detail provided).
Ransomware group known for targeting hotels, resorts, and claiming attacks on large companies, though some claims are unsubstantiated.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.