'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Cybersecurity researchers have identified NovaCookies, a subscription-based adversary-in-the-middle (AitM) phishing toolkit costing $320 per month. This platform enables attackers to abuse genuine Docusign notifications to redirect Microsoft 365 sign-ins. By acting as a proxy, NovaCookies captures authenticated sessions, allowing actors to steal more than just user credentials. This service significantly lowers the barrier to entry for malicious actors seeking to execute sophisticated session theft attacks against Microsoft 365 users through deceptive notifications.