Ransomware gangs now use Microsoft AzCopy to steal data over trusted Azure traffic

Ransomware operators have started using Microsoft AzCopy, a legitimate Azure Storage command-line utility, to exfiltrate data before they encrypt systems, according to a new report from Varonis Threat Labs. Varonis says its forensics team investigated multiple incidents where attackers used AzCopy for data theft, and one case slipped past the victim’s EDR tooling. This matters […] The post Ransomware gangs now use Microsoft AzCopy to steal data over trusted Azure traffic appeared first on VPN Central.