Microsoft And Crowdstrike Collaborate On Shared Threat Actor Mapping System
Microsoft, Monday, June 2nd, 2025
CrowdStrike Holdings Inc. and Microsoft Corp. today announced a strategic collaboration aimed at resolving the longstanding confusion in how cyberthreat actors are identified and tracked across security platforms.
The partnership establishes a shared mapping system that aligns adversary attribution across both companies' threat intelligence ecosystems, eliminating ambiguity caused by inconsistent naming.
The problem that both companies are trying to solve is one encountered commonly in cybersecurity news: various companies applying their own name to threat actors, making it sometimes difficult for observers to know what threat actor and ransomware group one report to another is talking about. For example, the well-known Cozy Bear hacking group is also known as Midnight Blizzard, depending on which company is writing the report, which doesn't exactly make intelligence tracking easy when different names are used.