Dark Reading
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
NovaCookies is a phishing-as-a-service kit enabling attackers to conduct adversary-in-the-middle attacks against Microsoft 365 users, stealing session cookies beyond credentials for $320/month. This lowers the attack complexity for email-based credential harvesting campaigns targeting enterprise cloud environments.
AI summary · generated with Claude
https://www.darkreading.com/endpoint-security/novacookies-steals-microsoft-365-sessions-320-a-month