← Back to Feed
'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month
August 26, 2026 · Dark Reading · Severity: LOW
The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just user credentials.
Key Takeaways
- NovaCookies uses adversary-in-the-middle tactics to bypass multi-factor authentication and steal session cookies.
- The service lowers the entry barrier for cybercriminals to launch sophisticated Microsoft 365 phishing attacks.
- Priced at $320 monthly, NovaCookies enables persistent session hijacking beyond initial credential theft.