Threat Intelligence / Actor / Storm-2755

Storm-2755

Nation: N/A · 1 tracked threat(s) · Categories: PHISHING

Also known as: Storm-2755, Payroll Pirate (Canada cluster)

Tracked threats

Storm-2755 'Payroll Pirate' Campaign: AiTM Phishing and Workday Account Hijacking Targeting Canadian Employees (CVE-2025-27152) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence