Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud Attack
Microsoft says Storm-3168 used stolen Azure identities to delete cloud resources within about seven minutes.
74
Product
Azure Storage
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 26, 2026
- Last mentionedSep 29, 2026
Timeline
4 articles · newest firstJadePuffer agentic AI attacks target Azure, destroy cloud resources
JadePuffer, tracked as Storm-3168, used AI-driven attacks to wipe Azure storage and other cloud resources.
78
Autonomous agents attack Azure using compromised identities and destroying resources
Microsoft says Storm-3168, or Jadepuffer, used compromised Azure service principals to delete cloud resources and collect credentials.
82
Storm-3168 Hackers Abuse Compromised Service Principals to Destroy Azure Cloud Resources
Microsoft says Storm-3168 used compromised Azure service principals to delete cloud resources and collect storage keys.
76
Appears with
- Azure SQLproduct · 4
- Storm-3168threat actor · 4
- Microsoftvendor · 4
- Azure Key Vaultproduct · 4
- Microsoftorganization · 4
- Azure Site Recoveryproduct · 3
- Jadepufferthreat actor · 3
- Sysdigorganization · 2
- Microsoft Azureproduct · 2
- Azure App Serviceproduct · 2
- Azure Backupproduct · 2
- Azureproduct · 2
- JadePuffermalware · 2
- Azure Functionsproduct · 1
- EncForgemalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.