As cited
Copy frozen at (site build).
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
NovaCookies is an adversary-in-the-middle (AitM) phishing service available for $320 per month that enables actors to steal Microsoft 365 session tokens, moving beyond simple credential capture to session hijacking. The service lowers technical barriers for threat actors to launch attacks at scale.
Why it matters: Organizations using Microsoft 365 are at risk from operators without deep technical skill who can now purchase session theft capabilities, bypassing multifactor authentication (MFA) controls and gaining direct access to accounts.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
NovaCookies is an adversary-in-the-middle (AitM) phishing service available for $320 per month that enables actors to steal Microsoft 365 session tokens, moving beyond simple credential capture to session hijacking. The service lowers technical barriers for threat actors to launch attacks at scale.
Why it matters: Organizations using Microsoft 365 are at risk from operators without deep technical skill who can now purchase session theft capabilities, bypassing multifactor authentication (MFA) controls and gaining direct access to accounts.
- Source published
- First seen by Cybersecurity Tracker