
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.
2 stories, newest first · one card per story

NovaCookies AitM phishing kit, a Sneaky 2FA variant, uses genuine Docusign lures to steal Microsoft 365 sessions at hundreds of organizations.

New NovaCookies adversary-in-the-middle phishing kit lets low-skill actors steal Microsoft 365 session cookies for $320 per month.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views