Snowflake Campaign is a threat campaign tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 29, 2025; most recent activity November 29, 2025.
Snowflake Campaign is a threat campaign that leverages exposed cloud identities to access Snowflake environments and related data platforms, illustrating the broader shift toward identity-centric intrusion. Its significance lies in highlighting how compromised credentials and misconfigurations can forecast incidents in cloud data services.
A report from ReliaQuest reveals that 44% of true-positive alerts in Q3 2025 were linked to identity-related weaknesses, such as excessive permissions and credential abuse. As organizations migrate assets to cloud…
A report from ReliaQuest reveals that 99% of cloud accounts are over-privileged, leading to a rise in identity-related attacks. In Q3 2025, identity compromises accounted for 44% of true-positive alerts, primarily due…