“Payroll Pirate” phishing scam that takes over Workday accounts steals paychecks

Among other things, the scammers bypass multi-factor authentication.

First seen on arstechnica.com

Jump to article: arstechnica.com/security/2025/10/payroll-pirate-phishing-scam-that-takes-over-workday-accounts-steals-paychecks/