Tag: Phishing-as-a-Service
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Phishing kit bypasses 2FA across 4,500 corporate domains
A two-year phishing-as-a-service campaign bypasses 2FA across more than 4,500 Microsoft 365 domains.
Google Lawsuit Targets Smishing Network That Weaponized Gemini AI
A PhaaS platform called Outsider used Google's Gemini AI to generate phishing page code, resulting in millions of stolen credit…