Sneaky 2FA

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 1, 2026
Last mentionedSep 1, 2026

Timeline

1 articles · newest first

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.

The Hacker NewsSep 1, 13:02 UTC · Sep 1, 2026Phishing & fraud2

Appears with

Microsoftvendor · 1
NovaCookiesproduct · 1
Islandvendor · 1
Cloudflarevendor · 1
GoDaddyvendor · 1
Proofpointvendor · 1
Oktavendor · 1
Docusignvendor · 1
NovaCookiesmalware · 1
Microsoft 365product · 1

Entities are extracted by the model from each article. First seen Sep 1, 2026, last mentioned Sep 1, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.