Cyber Signals: Inside the growing risk of gift card fraud

Microsoft Threat Intelligence details Storm-0539 (Atlas Lion), a persistent cybercrime group that has shifted from POS malware to targeting cloud and identity systems to hijack accounts and fraudulently generate gift cards. The report highlights observed increased activity around U.S. holidays, techniques such as registering malicious devices to bypass MFA, typosquatting and social engineering, and recommends conditional access, phishing-resistant MFA, least-privilege, continuous monitoring, and cloud security best practices.