[threat-actors] Add Storm-1099

clusters/threat-actor.json

@@ -14563,6 +14563,17 @@
       },
       "uuid": "2cc32087-f242-4091-8634-4554635b7a58",
       "value": "Storm-1084"
+    },
+    {
+      "description": "Storm-1099 is a sophisticated Russia-affiliated influence actor that has been conducting pro-Russia influence operations targeting international supporters of Ukraine since Spring 2022. They are known for their website forgery operation called \"Doppelganger\" and have been actively spreading false information. They have been involved in pushing the claim that Hamas acquired Ukrainian weapons for an attack on Israel. Storm-1099 has also been implicated in amplifying images of graffiti in Paris, suggesting possible Russian involvement and aligning with Russia's Active Measures playbook.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://blogs.microsoft.com/on-the-issues/2023/12/07/russia-ukraine-digital-threat-celebrity-cameo-mtac/"
+        ]
+      },
+      "uuid": "b05a2a56-08dc-4827-9aef-aaade91016a4",
+      "value": "Storm-1099"
     }
   ],
   "version": 298