Storm-2657
Storm-2657 is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets organisations in the United States and Canada. It uses 5 MITRE ATT&CK techniques.
- Techniques
- 5
- Exploited CVEs
- No CVE data
- Record updated
Who They Target.
Countries · 2
About Storm-2657.
A threat cluster attributed by Microsoft, involved in the Payroll Pirate campaign, focusing on financial fraud through cloud-native reconnaissance and session hijacking.
Last updated Jul 28, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.