Microsoft details Storm-3168, the JADEPUFFER-linked actor that used stolen service principals to delete Azure storage and harvest keys.

Azure ransomware attack: Storm-3168, an AI-orchestrated threat actor also known as JADEPUFFER, used two compromised service principals to delete 100+ Azure storage accounts in 7 minutes. Microsoft ...

Storm-3168 used stolen Azure identities to map an environment, destroy cloud resources and collect storage keys within minutes.

JadePuffer uses AI agents to target Azure tenants, steal credentials, and destroy cloud resources, including over 100 storage accounts.

A threat actor known as Storm-2949 has launched a sophisticated, multi-layered cloud attack campaign targeting Microsoft Entra ID accounts to steal sensitive data from Microsoft 365 and Azure ...