security: Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees
Microsoft Security Blog
2026-04-09
Microsoft reports on Storm-2755, a financially motivated threat actor targeting Canadian employee accounts to access profile data and redirect salary payments to attacker-controlled accounts. The post is based on observations from Microsoft Incident Response – Detection and Response Team (DART).