The Axios supply chain attack used individually targeted social engineering

The Axios team published a postmortem on a recent supply chain attack that injected malware into a release. The attack involved a highly targeted social engineering campaign against a maintainer: attackers cloned a real company's identity, created a convincing Slack workspace, scheduled a Microsoft Teams meeting, and tricked Show more