Storm-3168 used two Azure service principals to destroy cloud resources

Storm-3168, also known as JADEPUFFER, used two compromised Azure service principals to map a tenant and rapidly destroy cloud resources in an 18-hour campaign. Most storage accounts targeted were deleted, but resource locks and deletion protection blocked some attacks and prevented wider damage.
Source

👉@sysadminoff

https://4sysops.com/archives/storm-3168-used-two-azure-service-principals-to-destroy-cloud-resources/