A widespread phishing operation that compromises Microsoft 365 accounts through adversary-in-the-middle (AiTM) infrastructure, then uses Microsoft Graph to identify employees handling payroll, finance, HR, benefits, invoices, and banking workflows. The activity closely overlaps with Microsoft’s “Payroll Pirates” cluster, tracked as Storm-2755. Researchers also found similarities with activity previously documented by Security Risk Advisors, indicating that […]
The post Payroll Pirates Abuse Microsoft Graph to Find HR and Finance Staff After Account Compromise appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.