A sophisticated phishing campaign targets payroll and payment platforms by impersonating Deel through malicious Google ads, stealing…

Microsoft warns of Storm-2657, a financial crime group exploiting MFA flaws to hijack university employee accounts, rerouting salary payments through third-party HR platforms like Workday.

Microsoft warns of Storm-2657, a financial crime group exploiting weak MFA via AiTM phishing. The group hijacks university accounts to reroute salary payments through Workday HR and conceal tracks.

Qilin ransomware claims a massive data breach against Japan’s Super Value supermarket chain, leaking payroll, sales, and sensitive employee PII on the dark web.

A sophisticated new phishing campaign is targeting employees where they are most vulnerable—their paychecks—by leveraging QR codes to bypass corporate security defenses. A new analysis by CYFIRMA …

Microsoft DART uncovers Storm-2755, a "payroll pirate" using AiTM traps and SEO poisoning to steal salaries. Protect your organization from this MFA bypass.

A Payroll Pirate attack hijacks Microsoft 365 sessions, bypasses MFA, and redirects employee paychecks. Here's how SRA caught it and how to respond.

The active Payroll Pirate campaign uses AiTM session hijacking and token replay to target corporate payroll and HR personnel across multiple industries.

BushidoToken details Payroll Pirate, an AiTM phishing campaign that hijacks authenticated sessions to redirect payroll payments to attackers.