Cybercriminals are increasingly using legitimate HTTP client tools to facilitate Account Takeover (ATO), attacks on Microsoft 365 environments.
Enterprise security company Proofpoint has observed campaigns that use HTTP clients Axios or Node Fetch, to send HTTP requests to web servers and receive HTTP responses.
“Originally sourced by public