NovaCookies At Scale: Inside The $320 Phishing Service Targeting Hundreds Of Organizations
By Shachar Gritzman, Senior Security Researcher, Island. The NovaCookies phishing service is a commercial adversary-in-the-middle (AiTM) service that relays Microsoft 365 sign-ins to capture authenticated sessions. Meanwhile, trusted delivery chains, Microsoft and Google redirect hops, disposable infrastructure, and adaptive anti-analysis controls help its campaigns reach the lure. Executive Summary Advertised at $320 a month, the NovaCookies phishing service packages real-time…