Microsoft Security Blog · April 9, 2026

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

Why it matters

Microsoft DART tracks Storm-2755 compromising Canadian employee accounts to divert payroll payments to attacker-controlled accounts.

My takeaway: Not an AI article, but it shows how routine identity and HR processes remain high-value fraud targets. That matters for AI operations because the same back-office workflows are candidates for automation and need careful control design.