unc3944-microsoft-azure-access-to-virtual-machines Blog Related Topics 
CSO Magazine
MAY 17, 2023
Financially motivated threat actor UNC3944 is using phishing and SIM swapping attacks to take over Microsoft Azure admin accounts and gain access to virtual machines (VM), according to cybersecurity firm Mandiant. UNC3944 has been active since May 2022.
Heimadal Security
MAY 17, 2023
Researchers revealed that the UNC3944 threat actors use phishing and SIM-swapping attacks to get control over Microsoft Azure admin accounts. Hackers maliciously used the Azure Serial Console on Azure Virtual Machines (VM) to deploy remote management software within client environments.
Expert insights. Personalized for you.
100 
Let's personalize your content