Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

The threat actor known as Muddled Libra has been observed actively targeting software-as-a-service (SaaS) applications and cloud service provider (CSP) environments in a bid to exfiltrate sensitive data.
"Organizations often store a variety of data in SaaS applications and use services from CSPs," Palo Alto Networks Unit 42 said in a report published last week.
"The threat

actor alto applications as-a-service attacks cloud cloud service cloud service provider csp csps data data theft environments extortion focus libra muddled libra networks organizations palo palo alto palo alto networks saas saas applications sensitive sensitive data service service provider services shifts software store targeting theft threat threat actor