Account Compromise - 1

2026 (2)

April (2)

security: Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

Microsoft Security Blog

2026-04-09

Microsoft reports on Storm-2755, a financially motivated threat actor targeting Canadian employee accounts to access profile data and redirect salary payments to attacker-controlled accounts. The post is based on observations from Microsoft Incident Response – Detection and Response Team (DART).

security: Inside an AI‑enabled device code phishing campaign

Microsoft Security Blog

2026-04-06

Microsoft describes a new device code phishing campaign that uses AI and end-to-end automation to generate live authentication codes on demand. The result is more scalable account compromise, higher success rates, and longer post-compromise access.