Payroll Pirate Campaign Uses AiTM Session Hijacking to Bypass MFA and Redirect Salaries

A financially motivated campaign dubbed “Payroll Pirate” has emerged using advanced phishing and adversary-in-the-middle (AiTM) session hijacking to bypass multifactor authentication (MFA) and reroute payroll disbursements. This operation targets payroll and HR portals at mid-market and enterprise organizations, chaining credential theft, real-time session interception, and subtle profile changes to siphon funds without triggering conventional alarms. […]

The post Payroll Pirate Campaign Uses AiTM Session Hijacking to Bypass MFA and Redirect Salaries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.