Sneaky 2FA is a phishing kit that focuses on Microsoft accounts. NovaCookies is assessed to be a variant of Sneaky 2FA, but with additional flows for other identity providers like Okta and Entra domains federated to GoDaddy. Unlike Sneaky2FA, NovaCookies uses a fully managed PhaaS model.