Microsoft Storm-3168 Azure Attack: How Compromised Service Principals Deleted Cloud Resources — and How to Defend
Microsoft says Storm-3168 used compromised Azure service principals to delete cloud resources and collect storage keys. Here is what happened and how defenders can reduce the risk.

