A new malware Storm is brewing in the cloud
Microsoft warns of Storm-0501, a ransomware group targeting mostly cloud platforms
This approach allows them to be faster and more efficient
There are ways to defend against this threat, so stay alert
Microsoft is warning users about a ransomware operator that is more interested in compromising cloud infrastructure than on-premise devices since it’s faster, more efficient, and more disruptive.
In a new report, the company highlighted Storm-0501, a financially motivated group observed to go primarily for hybrid cloud environments. The group would first compromise on-premise Active Directory domains via domain trust relationships, and then use Entra Connect Sync servers to pivot towards the cloud and into Microsoft Entra ID tenants.
