Storm-3168

Storm-3168 is a Chinese state-sponsored hacking group that targets organizations across multiple sectors to steal intellectual property and sensitive government information. The group is known for using custom malware and exploiting unpatched vulnerabilities to maintain long-term access to victim networks. For enterprise governance, Storm-3168 activity signals a need to strengthen vulnerability management processes, monitor for advanced persistent threats, and ensure compliance with export control regulations if your organization handles restricted technology or research.

1 item

ResearchGlobal2026-09-28

AI Agent Attack Wiped 100 Azure Storage Accounts in Seven Minutes

A ransomware group tracked as JadePuffer (Storm-3168) used AI agents to automate destructive attacks against Azure cloud tenants in June 2026. Two observed attacks wiped more than 100 storage accounts within seven minutes and targeted backup protections to block recovery. Research from Microsoft and Sysdig shows AI-driven attack automation has compressed attacker timelines to the point where standard human-speed detection and response controls cannot keep pace.

JadePuffer Storm-3168 agentic AI cloud security ransomware Azure credential management incident response