[LINK] Standard for naming viruses after storms

Tom Worthington tom.worthington at tomw.net.au
Wed Sep 17 14:05:18 AEST 2025


Recently I stumbled across Microsoft Defender's list of computer 
security threats. These were all named after types of weather, such as 
Amethyst Rain, Antique Typhoon, Aqua Blizzard, Berry Sandstorm and Blue 
Tsunami.

I wondered if the type of meteorological event correspond to the 
severity of attack. These names didn't correspond to the Computer 
Antivirus Research Organization (CARO) malware naming: appear to cover 
this. https://bontchev.nlcv.bas.bg/papers/naming.html

It turns out Microsoft names nations after weather: Blizzard (Russia), 
Typhoon (China), Sandstorm (Iran) all the way down to Waterspout 
(Australia): 
https://learn.microsoft.com/en-us/unified-secops/microsoft-threat-actor-naming



-- 
Tom Worthington http://www.tomw.net.au
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <https://mailman.anu.edu.au/pipermail/link/attachments/20250917/c2ffcd4c/attachment.sig>


More information about the Link mailing list