Related Threat Clusters
-
Storm-2755 Targets Canadian Employees in Payroll Pirate Attacks
A financially motivated threat actor known as Storm-2755 is targeting Canadian employees by hijacking their payroll accounts to redirect salary payments to attacker-controlled bank accounts. The attackers employ…
4 articles · Updated April 10, 2026 -
Phishing Campaign Exploits Google Services to Evade Detection
A sophisticated phishing campaign has been identified that routes victims through Google services, including Google Meet and Google Ads, before landing on a credential-harvesting page for Microsoft 365. This method…
2 articles · Updated August 7, 2026 -
Gainsight Apps Breach Exposes Data of Over 200 Salesforce Customers
A significant supply chain attack has compromised Salesforce-stored data from more than 200 companies through applications published by Gainsight. Salesforce confirmed unauthorized access to customer data and is…
30 articles · Updated November 23, 2025 -
DoorDash Data Breach Exposes User Information Due to Social Engineering Attack
DoorDash confirmed a data breach that occurred on October 25, 2025, when an employee fell victim to a social engineering scam. The breach exposed personal information including names, email addresses, phone numbers, and…
75 articles · Updated December 2, 2025 -
DoorDash Confirms Data Breach Exposing Customer Information
DoorDash has confirmed a data breach that occurred in October 2025, affecting customers, Dashers, and merchants. The company is investigating the incident and has engaged a cybersecurity forensic firm to enhance its…
69 articles · Updated November 17, 2025 -
Data Breach Affects Over 200 Companies via Gainsight Integration with Salesforce
Hackers compromised Salesforce-stored data from more than 200 companies through a supply chain attack involving Gainsight applications. Google confirmed the breach, stating that unauthorized access to customer data was…
44 articles · Updated November 27, 2025 -
Malicious Chrome Extensions Compromise User Accounts
Cybersecurity researchers have identified malicious Google Chrome extensions that impersonate legitimate business tools, including Workday, NetSuite, and SAP SuccessFactors. These extensions can steal login credentials…
1 article · Updated January 26, 2026 -
Malicious Chrome Extensions Target Enterprise HR and ERP Systems
Five malicious Chrome extensions have been identified as a coordinated threat to enterprise HR and ERP platforms, specifically targeting Workday, NetSuite, and SuccessFactors. These extensions facilitate account…
2 articles · Updated January 19, 2026 -
LayerX Identifies Browser Extension Malware Concealed in PNG Files
LayerX has uncovered a significant cybersecurity threat linked to the GhostPoster browser extension. Koi Security's analysis revealed that malicious code was hidden within PNG image files, enabling the extension to…
8 articles · Updated January 16, 2026 -
CrowdStrike Terminates Insider for Sharing Sensitive Information with Hackers
CrowdStrike has confirmed the termination of a suspicious insider who shared internal screenshots with a hacking group. The incident did not result in a breach of the company's systems or compromise customer data,…
6 articles · Updated November 21, 2025
Recent Intelligence Reports
- Standard MFA Won't Stop Hackers Who Route Microsoft 365 Phishing Through Google — Techtimes · August 7, 2026
- Workday's new AI shield tests agents handling payroll and benefits data — Stocktitan · June 2, 2026
- Payroll pirates are conning help desks to steal workers' identities and redirect paychecks — www.theregister.com · April 11, 2026
- Microsoft: Canadian employees targeted in payroll pirate attacks — Bleepingcomputer · April 10, 2026
- Payroll pirates conned the help desk, stole employee's pay — Theregister · February 11, 2026
- Payroll pirates are conning help desks to steal workers' identities and redirect paychecks — Theregister · February 11, 2026
- Malicious Google Chrome extensions hijack accounts — Foxnews · January 26, 2026
- 5 Malicious Chrome Extensions Attacking Enterprise HR and ERP Platforms for Complete Takeover — Cybersecuritynews · January 19, 2026