Skip to main content

Tag: multi factor authentication bypass

2 articles

Office workspace with computers and subtle network hints, laptop screen visible.

Phishing Kit NovaCookies Exploits Docusign Notifications to Hijack Microsoft 365 Sessions

Meet NovaCookies, a sneaky phishing kit that's being sold for just $320 a month, and can hijack your Microsoft 365 sessions in real-time by cleverly intercepting Docusign notifications. This live adversary-in-the-middle relay captures active sessions, allowing hackers to harvest your credentials and multi-factor authentication codes.

Analyst 207
Blurred login page on a laptop screen in a cluttered modern office setting.

Phishing Kits Target Microsoft 365 Accounts, Evade Multi-Factor Authentication

Beware of phishing kits targeting Microsoft 365 accounts, which can cleverly evade multi-factor authentication and put sensitive data like customer info, financial records, and internal communications at risk. These sneaky attacks use social engineering tactics to trick victims into handing over access to their accounts.

Analyst 207