Storm-0558 is a China-based threat actor with espionage objectives. While there are some minimal overlaps with other Chinese groups such as Violet Typhoon (ZIRCONIUM, APT31), Microsoft maintain high confidence that Storm-0558 operates as its own distinct group

---

Alternate Group Names
5b30bcb8-4923-45cc-bc89-29651ca5d54e, Storm-0558,