Sneaky 2FA: The Precursor to NovaCookies
Sneaky 2FA is a phishing kit that focuses on Microsoft accounts. NovaCookies is assessed to be a variant of Sneaky 2FA, but…
Tag: phishing
Nyasher Phishing Framework
Nyasher is a phishing framework used to target Google accounts through fake bid proposal workflows, incorporating press-and-hold verification to evade scanners.
Rocky Gmail Sender Bulk Email Tool
Rocky Gmail Sender is a bulk email tool included in The Quarry PhaaS kit for sending phishing emails.
Rocky Email Sorter Tool
Rocky Email Sorter is a tool in The Quarry kit that sorts email addresses by domain (Gmail, Yahoo, Hotmail, AOL) for targeted…
Misconfigured Server Exposes Three Evilginx Phishing Operations Targeting Microsoft 365
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing…
Evilginx: Open-Source Adversary-in-the-Middle Phishing Framework
Evilginx is an open-source adversary-in-the-middle (AiTM) phishing framework used to bypass multi-factor authentication by proxying live login sessions. It has been forked…
Lexfo: French Cybersecurity Firm Specializing in Threat Intelligence
Lexfo is a French security company that discovered and analyzed three Evilginx phishing operations targeting Microsoft 365, leveraging a misconfigured server to…
Ledger’s 2020 Data Breach Still Echoes in Crypto Community
Ledger disclosed a database breach in December 2020 affecting approximately 272,000 customers. Subsequent research found spam, scams, and phishing linked to the…
Okta: Identity and Access Management
Okta is a company that provides identity and access management solutions. NovaCookies includes dedicated flows for Okta, in addition to Microsoft accounts,…
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories
ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories Ravie LakshmananJul 09, 2026Hacking News / Cybersecurity News…