All updates
security: Exposing Fox Tempest: A malware-signing service operation
May 19, 2026
Microsoft says Fox Tempest is a financially motivated threat actor running a malware-signing-as-a-service operation used by other cybercriminals to help distribute malicious code, including ransomware. The service has been linked to groups such as Vanilla Tempest and Storm.
- Source: Microsoft Security Blog