Arctic Wolf has identified an ongoing Microsoft 365 phishing campaign targeting organizations in healthcare, education, manufacturing, government, professional services, and other sectors across the United States, Canada, and Europe. The campaign, linked through technical and behavioral overlaps to the Payroll Pirates activity cluster known as Storm-2755, uses adversary-in-the-middle (AiTM) phishing pages to steal authenticated Microsoft […]
The post Payroll Pirates AiTM Campaign Hijacks Microsoft 365 Sessions to Hunt Payroll and Finance Mailboxes appeared first on Cyber Security News.