1. Overview Article Title: NovaCookies at scale: Inside the $320 Phishing Service...

The AitM service lowers the barrier to entry for actors to create phishing attacks that steal more than just user credentials.

NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth redirects.