Node.js User Agent M365 Sign-in

Ibrahim Saud@tektrix

•updated Jun 18, 2026•0•0•3

Detects sign-ins to M365 using the default Node.js user agent, indicative of the Tycoon 2FA kit relay tier.