Microsoft Azure accounts hit with phishing attacks to hijack virtual machines

Cloud computing concept represented by a server room, with a cloud representation hologram concept.

Cybersecurity researchers from Mandiant have uncovered a hacking collective with extensive knowledge of the Azure environment, using phishing and SIM-swapping techniques to infiltrate virtual machines and exfiltrate sensitive data.

In its report, Mandiant says it is tracking the group as “UNC3944”, claiming it’s been active since at least May 2022.