Microsoft plans a naming system for hackers

Ever tried to follow a show where the main villain had four different names?

Impossible, right?

But that’s exactly what it’s like in the world of cyber security right now.

One hacking group can be tracked under completely different names, depending on who’s writing about them. Whether it’s Microsoft, Google, CrowdStrike, or another security firm.

It’s confusing. And worse, it can slow down how quickly us experts, and the businesses we protect, can respond to a cyber attack.

That’s why Microsoft and security firm CrowdStrike are teaming up to fix this problem.

They’ve announced plans for a new, unified naming system for hacking groups. Think of it like giving each cyber criminal gang one official label that everyone agrees on. It’s not just about tidying up the names. It’s about making it faster and easier to understand who’s attacking, how they operate, and how to stop them.

Right now, let’s say there’s a hacking group targeting businesses like yours. Microsoft might call them Salt Typhoon. Another security company might call the same group GhostEmperor, or OPERATOR PANDA.

Unless you know they’re all the same threat, it’s easy to miss the full picture. And that’s a big problem when every second counts in a cyber attack.

The new naming system Microsoft’s working on will organise these groups by type and origin using weather-themed terms. For example, Chinese state-backed groups will get “Typhoon” in their name, Russian ones will get “Blizzard.” Other attackers like ransomware gangs or commercial spyware developers will be labelled using words like “Tempest,” “Storm,” or “Tsunami.”

It’s a simple idea, but a powerful one.

And it matters to your business more than you might think.

The more clearly cyber threats are identified and communicated, the quicker your IT team or your cyber security provider can spot patterns and act. It means better threat intelligence, fewer missed warnings, and a stronger, faster response when something suspicious appears.

Ultimately, this kind of collaboration between big players like Microsoft, CrowdStrike, Google, and others helps level the playing field for smaller businesses. You don’t need to be a cyber security expert to benefit. Simply knowing that everyone’s speaking the same language when a threat hits can make all the difference.

This is one of those behind-the-scenes changes that won’t make headlines but could have a big impact on keeping your business safe. It’s another step towards making cyber security a bit less chaotic, and a lot more effective.

Want help keeping your business better protected from cyber attacks? Get in touch.   

Recent posts

Is your team using banned AI tools?

Is your team using banned AI tools?

A conversation I’m having more often with business owners goes something like this: “We don’t really use AI yet.” A few questions later, it turns out somebody is using ChatGPT to help write emails. Someone else is summarising meeting notes with an AI tool....

read more
Have your employees become AI “middleware”?

Have your employees become AI “middleware”?

AI was supposed to remove repetitive work. In some businesses, though, something different is happening. People are spending large parts of their day moving information between systems so the AI can function properly. Copying notes from one platform into another,...

read more
Could this be the future of cyber security?

Could this be the future of cyber security?

Most cyber security tools work reactively. Something suspicious happens, the system spots it, and then tries to stop the damage before it spreads. That’s incredibly important. But Microsoft is working on something that pushes much further: Using AI to find weaknesses...

read more