Security Resilience

Threat actor · all actors

Moses StaffHACK-MOSES-STAFF hacktivist

🇮🇷 IR

aka Moses Staff, MosesStaff, DEV-0500

Last updated: 2026-07-03

0attributed CVEs
0ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active

About this actor

An anti-Israel hacktivist persona first observed in September 2021 conducting destructive intrusions disguised as ransomware against Israeli engineering firms. Microsoft tracks the operations as DEV-0500 / Storm-1084 and assesses them as IRGC-aligned despite the hacktivist self-presentation.

Activity timeline

No activity events recorded.

Profile

CVERiskCVSSEPSSPublishedProducts
No attributed CVEs.

No techniques attributed.

Co-occurring actors

None.

Similar actors

Same nation-state