'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

A phishing service known as NovaCookies is available, offering an adversary-in-the-middle capability that allows attackers to steal Microsoft 365 sessions. This service can be obtained for a monthly fee of $320. The NovaCookies kit enables actors to create attacks that go beyond just stealing user credentials. It lowers the barrier for attackers to launch such campaigns, making it more accessible to a wider range of threat actors. The service is focused on stealing Microsoft 365 sessions, which can provide attackers with significant access to sensitive information.