NovaCookies: A New AitM Phishing Kit Targeting Microsoft 365

NovaCookies is a subscription-based phishing-as-a-service (PhaaS) toolkit that uses adversary-in-the-middle (AitM) techniques to steal Microsoft 365 sessions. It is sold for $320 per month and has been used to target hundreds of organizations across multiple countries. The kit abuses genuine Docusign notifications and legitimate redirect hops to appear trustworthy, and includes anti-analysis checks to evade security scanners.