BlackCat Azure Storage Account RansomOp (Incident)
ID: 5ef50918-4eb2-5962-81b0-7501fa218cf9
STIX ID: report--5ef50918-4eb2-5962-81b0-7501fa218cf9
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2023-09-13
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
BlackCat ransomware actors compromised a customer's Azure portal, retrieved Azure Storage account access keys (base64-encoded and embedded in the ransomware binary), and ran the binary multiple times with an '-o' argument to target and encrypt 39 Azure Storage accounts; the report references external coverage of this cloud storage-focused ransomware campaign.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.