Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud
Microsoft is alerting people to Storm-0539, a cybercrime group based in Morocco that uses extremely sophisticated email and SMS phishing assaults to steal and fraudulently obtain gift cards.
According to the company's most recent Cyber Signals report, "their primary motivation is to steal gift cards and profit by selling them online at a discounted rate." "We've seen some examples where the threat actor has stolen up to $100,000 a day at certain companies."
Microsoft initially made public Storm-0539 in mid-December 2023, connecting it to social engineering efforts aimed at stealing users' passwords and session tokens using adversary-in-the-middle (AitM) phishing pages.
The group, also known as Atlas Lion, has been active since at least late 2021. They are known to take advantage ...


