
- Payroll Pirates spoofed HR platforms via ads to steal credentials and MFA codes
- Over 200 platforms were targeted, affecting around half a million users
- Telegram bots enabled real-time phishing, infrastructure spanned Kazakhstan, Vietnam, and cloaked domains
Scammers have been spoofing payroll systems, credit unions, and trading platforms across the US in a bid to steal login credentials and multi-factor authentication (MFA) codes, experts have warned.