Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft Security Research details JADEPUFFER (Storm-3168) conducting automated Azure-focused destructive operations using compromised service principals: extensive enumeration followed by a rapid destructive sequence that deleted numerous Storage Accounts and other resources, targeted backup/recovery protections, and later retrieved storage account keys; the activity is consistent with ransomware/extortion objectives though no ransom note or confirmed exfiltration was observed, and Microsoft provides mitigation guidance and IOCs.