Tool
AzCopy
- First Reported
- Nov 7, 2024
- Latest Reported
- Sep 30, 2026
Reported Context (2)
- The actor then downloaded AzCopy from hxxps://aka[.]ms/downloadazcopy-v10-linux and invoked it with an operator-supplied Azure Blob SAS URL targeting wsweb03[.]blob[.]core[.]windows[.]net/log/windows.log. Attackers Exploit Zimbra CVE-2026-73570 to Compromise Internet-Facing Mail Servers
- The attacker used Azure Storage Explorer, which leverages the utility AZCopy, to exfiltrate the victim’s data to an attacker-controlled Azure storage blob. Talos Details Interlock Ransomware’s Attack Chain and Links to Rhysida
CVE (1)
Malware (21)
People (4)
Threat Actors (4)
MITRE ATT&CK (28)
Vendors (3)
Products (22)
Tools (6)
Industries (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.