'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Summary

A new phishing kit called 'NovaCookies' is making it easier for threat actors to steal Microsoft 365 session cookies. For a monthly fee of $320, users gain access to an adversary-in-the-middle (AitM) phishing service that bypasses multi-factor authentication by capturing active session tokens. This allows attackers to gain unauthorized access to user accounts without needing to steal passwords.

Entities