Microsoft ties Storm-2755 campaign to payroll and HR attacks in Canada
The gist
Microsoft published an investigation of Storm-2755, a campaign targeting payroll and HR at Canadian organizations.
The attacks abused legitimate enterprise workflows, putting employee payroll data at risk.
How it unfolded
- Apr 9, 2026Microsoft published an investigation of Storm-2755, a financially motivated campaign using session hijacking and abuse of legitimate enterprise workflows to target payroll and HR processes at Canadian organizations.
- May 26, 2026A PGPF explainer reported payroll taxes made up 33 percent of total federal revenues in 2025, the second-largest source after income taxes.
- Nov 3, 2026TaxBandits launched Paywow as a standalone payroll solution for small businesses, nonprofits, household employers and agricultural operations, with a Basic plan starting at $19 per month and no per-employee fees.