CERT24NovaCookies campaigns abuse genuine DocuSign notifications to steal Microsoft 365 sessionsLoading data…
CERT24Threat Observatory
Period

NovaCookies campaigns abuse genuine DocuSign notifications to steal Microsoft 365 sessions

Cybersecurity researchers described NovaCookies, a subscription-based adversary-in-the-middle (AitM) phishing platform used to proxy Microsoft 365 sign-ins and capture authenticated sessions. Observed campaigns have targeted organizations across multiple sectors in the United States, the United Kingdom, Canada, Germany, Israel, and the United Arab Emirates.

← Back to intelligence

NovaCookies campaigns abuse genuine DocuSign notifications to steal Microsoft 365 sessions

Cybersecurity researchers described NovaCookies, a subscription-based adversary-in-the-middle (AitM) phishing platform used to proxy Microsoft 365 sign-ins and capture authenticated sessions. Observed campaigns have targeted organizations across multiple sectors in the United States, the United Kingdom, Canada, Germany, Israel, and the United Arab Emirates.