Microsoft Disrupts Storm-2139 for LLMjacking and Azure AI Exploitation

Microsoft exposed and pursued legal action against Storm-2139, a structured cybercriminal network that stole Azure AI API keys (a practice called LLMjacking) to bypass content safeguards, resell access, and generate abusive synthetic material. The report names core operators, describes the group's creator/provider/user model, details the misuse of stolen credentials to evade moderation, and summarizes Microsoft’s multi-pronged legal disruption and recommendations to strengthen credential protection and AI guardrails.