1. Overview Article Title: NovaCookies at scale: Inside the $320 Phishing Service...
1. Overview
Article Title: NovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of Organizations
Publisher: Island
Publication Date: 2026-08-26
Source: Island
NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth…
The AitM service lowers the barrier to entry for actors to create phishing attacks that steal more than just user credentials.
EvilTokens uses AES-GCM encrypted HTML and Microsoft Device Code Phishing to hide Microsoft 365 account takeover pages until…
Autonomous AI attacks, SonicWall credential stuffing, DNS hijacking, fake Claude malware, Chrome flaws, phishing campaigns, and…
ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain threats…
BlueNoroff uses fake Zoom and Teams meetings to profile crypto wallets, hijack Telegram accounts, and deliver Windows and macOS…
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
Hackers abuse npm mirrors to host phishing redirect pages
