[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fe5kHWIlfGPdhtZXizi-gPmIY1k7u4C6JprWqVPx5u0Y":3},{"article":4,"iocs":38},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"7acd2e00-3707-4f02-98a5-94d1df476dda","'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month","novacookies-kit-steals-microsoft-365-sessions-for-320-a-month-669b2a","The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just user credentials.","A new phishing kit called 'NovaCookies' is making it easier for threat actors to steal Microsoft 365 session cookies. For a monthly fee of $320, users gain access to an adversary-in-the-middle (AitM) phishing service that bypasses multi-factor authentication by capturing active session tokens. This allows attackers to gain unauthorized access to user accounts without needing to steal passwords.","NovaCookies phishing kit steals Microsoft 365 sessions for $320\u002Fmonth.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fendpoint-security\u002Fnovacookies-steals-microsoft-365-sessions-320-a-month","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt96335316773d01f2\u002F64f1723c4be8f94ae717439d\u002Fcookie_monster-dpa_picture_alliance-Alamy.jpg?width=720&quality=80&disable=upscale","2026-08-26T11:33:40+00:00","2026-08-26T14:00:27.961782+00:00",7,[18],{"name":19,"type":20},"Microsoft 365","product","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":21,"icon":11,"name":23,"slug":24},"Malware","malware",[26,31,33],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":32},{"id":21,"icon":11,"name":23,"slug":24},{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]