N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
Summary: N0va is running phishing campaigns against organizations in North America and Europe, impersonating Microsoft Teams, SharePoint, OneDrive, DocuSign, Google Drive, Dropbox, Zoom and Adobe Sign, and guiding victims through legitimate authentication flows rather than only fake login pages. After authentication, the campaign can capture access and refresh tokens and abuse token-exchange or device-registration mechanisms to establish SSO access to email, files and cloud applications, with activity observed in government, technology, consulting and healthcare sectors.
What you should know: A single compromised identity can reach sensitive data, business systems and additional cloud resources, and the longer that access goes unnoticed, the greater the potential for wider compromise, operational disruption and financial loss.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026