NovaCookies AitM Phishing Service Enables Microsoft 365 Session Hijacking

The NovaCookies phishing-as-a-service platform has emerged, allowing threat actors to bypass multi-factor authentication by intercepting active Microsoft 365 session tokens. This tool lowers the technical barrier for credential theft and session hijacking, posing a significant risk to enterprise account security.