Storm-3168: Agentic-driven cloud attacks using compromised service principals

Strategic summary

Microsoft Security Research identified malicious cloud activity attributed to Storm-3168, also known as JADEPUFFER, which is reported as the first documented agentic ransomware operation. The threat actor used compromised service principals to perform bulk destructive actions against Azure Storage Accounts, SQL databases, Key Vaults, Function Apps, recovery protection locks, Virtual Machines, and App Services. Two compromised service principals from the same tenant were observed: one conducted extensive reconnaissance, while the other performed discovery, destruction, and cloud credential collection. The report highlights a broader shift toward AI-orchestrated attacks and recommends protecting workload identities and secrets, enforcing least privilege, safeguarding recovery resources, and enabling Microsoft Defender for Cloud.

Key findings

• Storm-3168 (JADEPUFFER) compromised two service principals in the same Azure tenant and used them for reconnaissance, resource destruction, and cloud credential collection.
• One service principal enumerated Azure resources for 15 hours and 30 minutes with over 300 successful read operations; the second enumerated virtual machines and resource groups across two subscriptions in just five seconds.
• Destructive operations targeted Azure Storage Accounts, SQL databases, Key Vaults, Function Apps, recovery protection locks, Virtual Machines, and App Services.
• Publicly exposed credentials remain usable until revoked or rotated; removing the original disclosure alone does not remediate the exposure.
• Microsoft recommends protecting workload identities and secrets, enforcing least privilege, safeguarding recovery resources, and enabling Microsoft Defender for Cloud.