JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor's tradecraft. The attack took place in early June 2026 over a period of about 18 hours. "The destructive operations

Microsoft reported that JADEPUFFER, tracked as Storm-3168, used two compromised Azure service principals to perform reconnaissance, collect cloud credentials, and delete Azure resources including storage accounts, databases, Key Vaults, and recovery-related controls. The report describes automated activity but does not establish that an AI system caused or controlled the attack. RealGround analysis: the incident is most relevant to AI agent abuse because compromised machine identities and automated workflows can execute high-impact cloud actions; organizations should assess agent and service-principal permissions, destructive-action guardrails, monitoring, and recovery controls.