Service Principals

JadePuffer Storm-3168 Wipes Azure Resources Using Compromised Service Principals

Microsoft has linked destructive Azure activity to JADEPUFFER, tracked as Storm-3168. Two compromised service principals were used for reconnaissance, resource deletion and credential collection across a victim’s Azure environment.