Storm-3168

Named by 2 kept items in this workspace.

1 items name it under classification.key entities and 1 under threat actors.

Search every workspace for Storm-3168. It matches the name as written, so it can find other things that share it.

The items that name it 2

Check Point Research — 28th September Threat Intelligence Report
articleas threat actors2026-09-28
Threat actor associated with JADEPUFFER, using compromised service principals to conduct destructive operations in Azure environments, including reconnaissance, credential collection, and bulk deletion attempts.
Storm-3168: Agentic-driven cloud attacks using compromised service principals
writeupas classification.key entities2026-09-25

All threat actors in this workspace.