The financially motivated risk actor often called Storm-0501 has been noticed refining its techniques to conduct knowledge exfiltration and extortion assaults concentrating on cloud environments.
“In contrast to conventional on-premises ransomware, the place the risk actor sometimes deploys malware to encrypt crucial recordsdata throughout endpoints inside the compromised community after which negotiates for a decryption key,
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Information in Hybrid Cloud Assaults
