A criminal group known as UNC5537 has been extorting victims of a data breach at cloud-based data warehousing platform Snowflake, demanding ransoms of up to $5 million. The group is also attempting to sell the stolen data on cybercriminal forums. Mandiant has released a threat hunting guide for Snowflake to help customers detect malicious activity.
