Storm-2755 is a financially motivated threat cluster tracked by Microsoft, also known as Payroll Pirates. It hijacks employee accounts to reroute salary payments to attacker-controlled accounts. The group uses AitM phishing and residential proxies to compromise Microsoft 365 accounts and steal payroll-related emails.