https://securityonline.info/http-client-tools-weaponized-in-account-takeover-attacks/