Microsoft links destructive Azure Storage deletions and storage key theft by Storm-3168 (JADEPUFFER) to compromised service principals with credentials leaked on GitHub.
Microsoft attributes Azure cloud destruction attacks to Storm-3168, the actor behind JadePuffer agentic ransomware, after hijacked service principals deleted 100+ storage accounts.
Microsoft details Storm-3168 (JADEPUFFER) using two stolen Azure service principals to rapidly delete 100+ storage accounts and harvest keys for extortion.
Microsoft details Storm-3168 (JADEPUFFER) destroying Azure resources via compromised service principals in the first documented agentic ransomware operation's Azure activity.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views