Security analysts tracked an active cloud targeting campaign utilizing highly localized executive phishing models. Threat actors compromised senior corporate profiles to gain administrative access to internal Azure environments, modifying tenant permissions and exfiltrating file payloads.