UNC5537 Targeting Snowflake Users for Data Theft and Extortion

UNC5537, a threat actor, targets Snowflake instances, focusing on data theft and extortion, exploiting weak authentication and VPN IPs. Snowflake customers should heed recent communications, as over 1,500 organizations are targeted. Proactive threat hunting and robust security measures are essential to safeguard against UNC5537’s sophisticated attacks.