SloppyLemming and Storm-0501 Hackers Exploit Cloudflare and Microsoft Services in Asia

The hacker group 'SloppyLemming' has been exploiting Cloudflare Service, specifically targeting government, law enforcement, and energy sectors in South & East Asia. Their primary attack methods include spear-phishing and credential harvesting. Cloudflare has issued warnings about these India-linked hackers. Additionally, Microsoft has identified the financially motivated cybercriminal group Storm-0501 as a significant threat. Storm-0501 has been exfiltrating data and deploying Embargo ransomware by moving laterally from on-premises to cloud environments. The group has exploited weak credentials and over-privileged accounts in these attacks.