APT ATLAS

Atlas Actors147 Names471 Sectors40 Requirements480

⌘K

Atlas Actors147 Names471 Sectors40 Requirements480

Vice Society (aka Vice Society, Vanilla Tempest) · APT Atlas

Actors/Cybercrime/Unattributed

Vice Society

CRIME?? · Unattributed

AKA Vanilla Tempest · Storm-0832

Microsoft: DEV-0832

Ransomware crew historically targeting education and healthcare.

Targets25

Sectors17

Threat types1

GIRs covered0/480

Active since2021

QUICK FACTS

TypeCybercrime

OriginUnattributed

First seen2021

Type (verbatim)eCrime

GIR coverage0/480

TTPs0

Targets25

Sectors17

Last reviewed2026-05-20

Also tracked as

1 vendor names · 2 other aliases

Open Rosetta Stone

Microsoft

DEV-0832

UNATTRIBUTED ALIASESVanilla TempestStorm-0832

Victimology

Geographic footprint · 25 countries

origin · unattributedtargeted countries · 25

ASIA · 8

United Arab Emirates · Iran · Lebanon · Malaysia · Philippines · Saudi Arabia · Singapore · Thailand

OCEANIA · 1

Australia

EUROPE · 7

Belgium · Denmark · France · United Kingdom · Greece · Hungary · Sweden

AMERICAS · 8

Brazil · Canada · Chile · Colombia · Dominican Republic · Ecuador · Mexico · Puerto Rico

AFRICA · 1

Kenya

Sectors targeted

17 of 40

Government100 actors Financial Services74 actors Telecom72 actors Retail & Hospitality33 actors NGOs & Dissidents56 actors Energy / Utilities59 actors Education & Research62 actors Manufacturing (man)50 actors Media & Journalism49 actors Transportation31 actors Logistics22 actors Real Estate10 actors Hospitality33 actors Food and Beverage10 actors Consulting / Professional Services35 actors Chemicals20 actors Consumer Goods / Electronics20 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

RAN · Ransomware

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

Open matrix

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

FIN10cybercrime

unattributed · 1 targets · since 2013

FIN2cybercrime

unattributed · 0 targets · since —

FIN6cybercrime

Russia · 15 targets · since 2014

APT73nation-state

unattributed · 0 targets · since —

UNC1543cybercrime

unattributed · 22 targets · since —

FIN3cybercrime

unattributed · 1 targets · since —