UNC5537 Targeting Snowflake Users for Data Theft and Extortion

Threat Advisories

UNC5537 Targeting Snowflake Users for Data Theft and Extortion

Summary:

UNC5537, a threat actor, targets Snowflake instances, focusing on data theft and extortion, exploiting weak authentication and VPN IPs. Snowflake customers should heed recent communications, as over 1,500 organizations are targeted. Proactive threat hunting and robust security measures are essential to safeguard against UNC5537’s sophisticated attacks.
 

Threat Level – Red | Attack Report

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.