N0va Phishkit Exploits Legitimate Authentication Flows to Target US and EU Enterprises

N0va phishkit targets US and EU businesses by exploiting legitimate authentication flows through trusted platforms like Microsoft and Google. It enables attackers to gain SSO access to corporate resources, risking data exposure, financial loss, and operational disruption.

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity.

From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud

Read original article