As cited
Copy frozen at (site build).
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Security researchers disclosed NovaCookies, a subscription-based adversary-in-the-middle phishing toolkit priced at $320 per month that proxies Microsoft 365 sign-ins and harvests authenticated sessions. The campaigns abuse genuine DocuSign notifications to lure targets into the phishing flow.
Why it matters: Microsoft 365 administrators and users face session hijacking attacks that bypass standard authentication; organizations should monitor for DocuSign-themed phishing and enforce additional verification before granting access to sensitive resources.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Security researchers disclosed NovaCookies, a subscription-based adversary-in-the-middle phishing toolkit priced at $320 per month that proxies Microsoft 365 sign-ins and harvests authenticated sessions. The campaigns abuse genuine DocuSign notifications to lure targets into the phishing flow.
Why it matters: Microsoft 365 administrators and users face session hijacking attacks that bypass standard authentication; organizations should monitor for DocuSign-themed phishing and enforce additional verification before granting access to sensitive resources.
- Source published
- First seen by Cybersecurity Tracker