NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new adversaryinthemiddle AitM phishing toolkit called NovaCookies thats used as a proxy to redirect Microsoft 365 signins while capturing authenticated sessions in the process In a report shared with The Hacker News ahead of publication Island characterized the 320month service as a subscriptionbased phishing platform that