Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A campaign attributed to Storm-0539 (also known as Atlas Lion) targets the retailer accounts and systems that issue gift cards, rather than relying only on tricking shoppers. Phishing messages aimed at retail employees can lead to cloud and identity reconnaissance, stolen sessions or tokens, and access to gift-card portals where attackers create cards for cash-out or resale.
How this gift-card fraud works
Dark Reading reported on May 23, 2024, that Storm-0539 sends phishing texts to retail employees to obtain access to employer accounts. Microsoft’s May 23, 2024 analysis describes the campaign as a broader cloud and identity intrusion: attackers investigate services and accounts, compromise sessions and tokens, and seek persistent access before moving toward gift-card infrastructure.
That makes the retailer’s issuance process the target. The scheme does not eliminate consumer-facing gift-card scams; it adds a route in which an attacker abuses the systems and identities that create or manage cards.
The reported attack path
- Initial phishing: A text or other message targets a retail employee and attempts to obtain credentials or an authenticated session.
- Cloud and identity reconnaissance: The intruders map resources, accounts and services in the retailer’s environment to find a path to sensitive systems.
- Session and token abuse: Microsoft says a compromised session and token can be used to register a malicious device, maintain access and receive secondary-authentication prompts.
- Movement to supporting services: Access to resources such as SharePoint or a VPN may reveal information or provide another route toward the gift-card environment.
- Unauthorized issuance: Once an issuance portal is reached, compromised accounts can create gift cards for illicit use.
- Monetization: Dark Reading says the cards may be cashed out directly, routed through money mules or sold to other malicious actors.
“Storm-0539 gathers information on a wide variety of resources in targeted environments to advance toward its objective to steal gift cards.”
#1 Best Overall
Find Scrapblooms Greeting Card Storage & Organizer Box with 6 Removable Dividers for Holiday Birthday Get Well Cards Photos, Crafts, Scrapbooking(Clear)
- Efficiently organize your greeting cards with our sturdy PP material box that comes with 6 removable dividers.
- Never lose track of your greeting cards again with our easy to close box that features 2 strong closures.
- Designed specifically for older women, our greeting card organizer is easy to use and durable.
- Say goodbye to clutter and hello to organization with our sticker organizer that can also be used for cards.
- Keep your cards and stickers neatly stored and easily accessible with our functional and stylish card organizer.
— Emiel Haeghebaert, Senior Hunt Analyst, Microsoft Threat Intelligence Center, quoted by Dark Reading on May 23, 2024
Why gift-card portals are valuable targets
A gift-card portal can turn an already compromised employee identity into a direct way to generate monetary value. The attacker does not need to persuade each shopper to buy a card and disclose its code; control of an authorized issuance workflow can allow cards to be created at scale and then monetized through several channels.
Rank #2
- 【Durable Materials】: Our credit card organizer is made of water-resistant and wear-resistant PU, reinforced with sealed edges and durable PVC credit card sleeves. It is scratch-resistant and water-repellent, resistant to dust and sweat, and easy to clean. The edges of the credit card holder are reinforced to provide the advantages of wrinkle resistance and crack resistance.
- 【RFID Blocking】The credit card holder has an anti-shield lining, which can effectively block the electronic scanning instrument from illegally scanning the credit card in the card holder to protect the security of your RFID chip card.
- 【Easy to Find & Read】The internal translucent anti-magnetic PVC card page makes it easy for you to find and read card information and quickly find the card you need.
- 【Large capacity / Multipurpose】A total of 32 card slots, each card can hold 3 cards. A total of 96 card slots, fully meet your needs for card storage. You can hold your important customer business cards, credit cards, debit cards, ID cards, membership cards, VIP cards, invoices, receipts, etc. to prevent loss and damage.
- This is the best choice to keep your credit card and business card organized and easy to manage. Can be used to store credit cards or business cards that are important but not commonly used.
The exact privileges required depend on a retailer’s design. An employee account may expose useful documentation without being able to issue cards, while another account or service may have the required permissions. That is why Microsoft frames the problem as an identity, cloud and access-control issue rather than only a point-of-sale problem.
What Microsoft’s activity figures mean
Microsoft reported a 30% increase in Storm-0539 activity between March and May 2024. It also said activity from September through December 2023 was 60% higher than usual, as reported by Dark Reading. These are measurements for the stated periods, not estimates of the group’s activity in 2026 and not a count of fraudulent cards or confirmed losses.
Rank #3
- High-Capacity Storage: This greeting card organizer measures 10.24'' x 7.8'' x 6.3'', providing ample space to store over 150 card dividers for storage boxes. Each box comes with 16 dividers, 84 sticky labels (including 56 blank labels), and 1 marker pen
- High-Quality Materials: This card storage box, made of high-density fiberboard and wrapped in linen, combines vintage elegance with durability. Its sturdy, wear-resistant design offers secure, moisture-proof, and organized storage for your greeting cards
- Easy to Organize: Using this divider-equipped gift card organizer, you can quickly find the right card with pre-labeled categories such as holidays or recipients, or use blank stickers for quick customization, easy access
- Multifunctional Box: Beyond greeting cards, a card organizer box with dividers can organize vinyl records, stickers, envelopes, recipes, photos, bills, and memorabilia. Keep your space tidy while adding refined elegance to your decor
- Foldable Design: Greeting cards assortment box collapsible card storage box saves space when not in use, making it ideal for home and travel. When needed, it easily unfolds, and the handles on both sides make it convenient to carry and move
How retailers can reduce the risk
Microsoft recommends treating gift-card portals as high-value assets and combining identity controls with continuous monitoring. The measures below are layers; no single control is described as stopping every attack.
Protect identities and sign-ins
- Apply conditional-access rules so access depends on user, device, location and risk signals.
- Use sign-in risk policies to challenge or block suspicious authentication.
- Require phishing-resistant multifactor authentication for employees and administrators who can reach gift-card systems. A physical FIDO2 security key is one possible implementation, provided it is compatible with the organization’s identity platform; neither cited source endorses a particular brand or model.
- Use strict password-reset procedures and investigate unexpected reset activity.
- Revoke sessions and tokens when compromise is suspected, and monitor for token replay.
Limit what each account can do
- Enforce least privilege for gift-card portals, cloud administration, VPNs and related services.
- Separate routine employee accounts from accounts able to create, activate, adjust or refund cards.
- Require additional approval or step-up authentication for unusual issuance volumes, high-value cards or administrative changes.
- Review device registration and block unapproved devices from receiving authentication prompts.
Monitor the issuance workflow
- Continuously monitor gift-card portals, not only the retailer’s general login systems.
- Audit anomalous activity such as sudden issuance spikes, unusual denominations, activity outside normal shifts, unfamiliar devices, new locations or unexpected API use.
- Correlate portal events with sign-ins, token changes, password resets, device registrations and VPN or cloud access.
- Set an escalation path that can suspend issuance, revoke sessions and preserve logs while an investigation proceeds.
Harden the surrounding cloud environment
- Inventory services and accounts that can expose portal URLs, procedures or credentials.
- Protect collaboration stores such as SharePoint and remote-access services with the same conditional-access and least-privilege standards.
- Educate security teams and employees about social engineering, including phishing delivered by text.
Warning signs for security teams
- An employee account accesses gift-card administration after a suspicious text-message campaign or unusual sign-in.
- A new device is registered shortly before secondary-authentication prompts appear.
- Gift-card creation rises sharply or occurs from unfamiliar geography, device or network.
- Several identities show related token, password-reset or VPN anomalies.
- Portal activity does not match the employee’s role, shift or normal transaction pattern.
Any one signal can have a legitimate explanation. The useful question is whether identity, device, cloud and issuance events form a connected sequence.
Rank #4
- Master Your Card Collection Effortlessly: Easily store and organize all your greeting cards in one place! ZICOTOs’ greeting card organizer helps you manage holiday, anniversary, and congrats cards effortlessly, keeping them pristine and ready for any occasion
- Pick Your Cards Quick & Easy: Find the matching card in seconds with the card organizer box with dividers. It comes with a selection of stickers, from monthly ones to those for weddings, birthdays, thank you cards & co., ensuring you always have quick access
- Max. Storage - Your Complete Card Collection Keeper: The 7.7x7.8x7.6” foldable greeting card storage box offers ample space to fit your entire greeting card collection, so you'll never be caught without the right card. Ready to share your heartfelt message anytime
- Stylishly Organized - Modern Linen Box: The sturdy greeting card holder in elegant linen keeps your cards stylishly sorted, with a modern ivory finish and golden label holder for a touch of glam! Note: greeting cards not incl.
- Super Versatile - Beyond Greeting Cards: This chic storage box does it all, organizing not just cards but also photos, receipts, coupons and keepsakes. Keep your space tidy, knowing everything is in its right place, while adding a touch of charm to your decor
What this report does—and does not—establish
The cited May 23, 2024 reporting identifies Storm-0539’s retailer-focused method and Microsoft’s defensive recommendations. It does not name specific retailer victims, provide total confirmed losses, state how many fraudulent cards were produced, or establish a current 2026 activity level.
It also does not say that Storm-0539 bypasses every form of multifactor authentication. Microsoft’s description is more specific: the group can use an initial compromised session and token, register malicious devices and obtain secondary-authentication prompts. Controls should therefore address session and token theft as well as password phishing.
Quick Recap
Best Value
- Large capacity business card storage: This book-style business card organizer can hold up to 240 business cards, two cards back-to-back in each pouch. It is very compact & professional. Enough capacity for your different cards: business cards, credit card, social security, gift cards, insurance cards, name cards, personal IDs, mini photos, and more
- Sturdy & Long-lasting card book: Name card holder is made from high-quality pu leather cover and PVC pocket sheets. Long-lasting and sturdy
- Easy to find & read: Card holder book transparent slots are good for reading and finding information on the business card
- Compact size business card folder: The slim profile and lightweight design make carrying a breeze – Carry it in your hand, pocket or handbag when on the go. Dimension: 7.7"x 4.5" x 0.7"
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
