payroll fraud

Arctic Wolf says an active Microsoft 365 phishing campaign is stealing authenticated sessions from users in the United States, Canada, and Europe, then quietly mapping payroll, HR, finance, and administrative mailboxes for later fraud. The immediate operational concern is not a familiar...

Microsoft’s latest Storm-2755 research is a sharp reminder that payroll fraud has evolved far beyond simple credential theft. In the campaign Microsoft DART analyzed, attackers used malvertising, SEO poisoning, and adversary-in-the-middle (AiTM) phishing to hijack sessions, bypass MFA, and...