Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks

Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft’s Direct Send feature to form a „highly efficient attack pipeline“ in recent phishing campaigns, according to new findings from ReliaQuest.
„Axios user agent activity surged 241% from June to August 2025, dwarfing the 85% growth of all other flagged user agents combined,“ the cybersecurity company said in a
https://thehackernews.com/2025/09/axios-abuse-and-salty-2fa-kits-fuel.html