A Moroccan cybercriminal group, identified as Atlas Lion or Storm-0539, has been posing as charities to steal US gift cards, the FBI and Microsoft researchers warned.