"US Retailers Under Attack by Gift Card-Thieving Cyber Gang"

"Storm-0539," also known as "Atlas Lion," is a Moroccan cybercriminal group that compromises retailers and creates fake gift cards. Microsoft detailed the group's tactics, techniques, and procedures (TTPs), which show their reconnaissance skills, cloud environment use, and cost-cutting. Microsoft analysts noted that Storm-0539's ability to breach and create cloud-based attack infrastructure saves them upfront costs. The group poses as a legitimate non-profit to cloud providers in order to receive sponsored or discounted services. They also use free trials or student accounts and hijack newly registered WordPress domains to host fraudulent pages. This article continues to discuss the threat group targeting US retailers. 

Help Net Security reports "US Retailers Under Attack by Gift Card-Thieving Cyber Gang"

Submitted by grigby1