Microsoft Defender for Cloud

Storm-3168 used a second stolen service principal to delete most targeted Azure storage in about seven minutes

Microsoft says Storm-3168, the JADEPUFFER group, tried more than 100 Azure storage deletions in seven minutes with a stolen service principal. Resource locks saved a few accounts, and the SQL databases survived on the attacker's own API error.