Microsoft detected a unique operation where threat actors carried out destructive actions in both on-premises and cloud environments.