Advertisement
HIGH
Threat Intel
Microsoft Disrupts Fox Tempest Malware-Signing-as-a-Service Operation
Microsoft disrupts the Fox Tempest MSaaS operation which weaponized Artifact Signing to facilitate global ransomware attacks and compromise thousands of networks.
Runtime Rebel Intel
3 min read·May 20, 2026
TH
HIGH
Threat Intel
Microsoft Disrupts Fox Tempest Malware Signing Service
Microsoft dismantled the Fox Tempest (Storm-1152) malware signing service, which issued over 10,000 fraudulent certificates to mask ransomware and other malware.
Runtime Rebel Intel
5 min read·May 19, 2026