Skip to content
Threat Feed
Subscribe

Actor

Rhysida

1 brief RSS
medium threat

Abuse of Azure Storage Utilities for Data Exfiltration

Threat actors, including Rhysida and Storm-0501, abuse native Microsoft Azure storage utilities as living-off-the-land binaries to exfiltrate data from compromised endpoints to attacker-controlled cloud storage.

AzCopy +1 Rhysida exfiltration ransomware living-off-the-land cloud-security
1r 3t