Payroll pirate attacks targeting Canadian employees

Reported 09 Apr 2026 by otx · Severity: medium

Microsoft Incident Response researchers identified Storm-2755, a financially motivated threat actor conducting payroll pirate attacks against Canadian users. The campaign uses malvertising and SEO poisoning on generic search terms like "Office 365" to lure victims to a fraudulent