Cybersecurity researchers have disclosed a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies, which is used as a proxy to redirect Microsoft 365…
NovaCookies is a subscription-based phishing-as-a-service (PhaaS) toolkit that uses adversary-in-the-middle (AitM) techniques to steal Microsoft 365 sessions. It is sold for $320…
Entra is Microsoft's identity and access platform. NovaCookies includes flows for Entra domains federated to GoDaddy, expanding its targeting beyond standard Microsoft…
Docusign is a company that provides electronic signature and document management services. NovaCookies campaigns abuse genuine Docusign notifications to deliver counterfeit document-share…
Okta is a company that provides identity and access management solutions. NovaCookies includes dedicated flows for Okta, in addition to Microsoft accounts,…
GoDaddy is a company that provides domain registration and web hosting services. NovaCookies includes flows for Entra domains federated to GoDaddy, indicating…
Cloudflare is a web infrastructure and security company. NovaCookies uses a Cloudflare gate as an anti-analysis check to evade security scanners before…
Proofpoint is a cybersecurity company specializing in email security, threat intelligence, and compliance. Proofpoint assessed NovaCookies as a variant of the Sneaky…
Island is a cybersecurity company that provides an enterprise browser with built-in security and governance controls. In this context, Island disclosed details…