Microsoft is warning of an active scam that diverts employees paycheck payments to attacker controlled accounts after first taking over their profiles on Workday or other cloud based HR services. Payroll Pirate, as Microsoft says the campaign has been dubbed, gains access to victims HR portals by sending them phishing emails that trick the recipients into providing their credentials for logging in to the cloud account. The scammers are able to recover multi factor authentication codes by using...
