payroll fraud

  1. Storm-2755 Payroll Pirate Attacks: AiTM Session Hijacking Redirects Canadian Wages

    Microsoft’s latest Storm-2755 research is a sharp reminder that payroll fraud has evolved far beyond simple credential theft. In the campaign Microsoft DART analyzed, attackers used malvertising, SEO poisoning, and adversary-in-the-middle (AiTM) phishing to hijack sessions, bypass MFA, and...