'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
ID: 05df7353-e2c2-566f-8d10-e573129f34a2
STIX ID: report--05df7353-e2c2-566f-8d10-e573129f34a2
Feed Name: Dark Reading
Threat Score
A commercial AitM phishing service called NovaCookies is being rented to relay and steal authenticated Microsoft 365 sessions—bypassing MFA—for as little as $200–$320, with researchers identifying at least 755 domains and campaigns targeting hundreds of organizations; the report details delivery and evasion tactics and urges defenders to adopt phishing-resistant authentication (FIDO), managed devices/browsers, session revocation, and token refreshes.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.