3 Ways to Chill Attacks on Snowflake

A credential-theft campaign using information-stealing malware targeted Snowflake customer environments, with investigations linking the activity to at least 165 potentially impacted customers, more than 500 stolen Snowflake credentials, and roughly 296 suspicious IP addresses; incident responders (Mandiant, CrowdStrike) traced incidents to compromised customer credentials and the report emphasizes defenses including MFA, SSO/SCIM account provisioning, network policies to restrict IP access, and attack-path management to limit blast radius.