MICROSOFT WARNS OF NEW “PAYROLL PIRATE” SCAM STEALING EMPLOYEES' DIRECT DEPOSITS

Summary from the TLDR InfoSec newsletter

A phishing campaign called Payroll Pirate targets university employees by tricking them into giving up credentials for HR platforms like Workday. Attackers use adversary-in-the-middle methods to bypass multi-factor authentication, alter payroll settings and divert paychecks, and hide their tracks by creating inbox rules and adding their recovery phone numbers.