N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security
-
A phishing toolkit tracked as N0va is being used against organizations across North America and Europe, impersonating trusted services and abusing legitimate authentication flows to gain access to valid accounts. Because the attacks ride on normal login paths rather than obvious malware, the activity is harder for defenders to flag through conventional endpoint detection.
Once a single identity is compromised, the actor gains a foothold that can extend to sensitive data, business systems, and additional cloud resources, turning one valid account into a broader intrusion path. The campaign underscores how identity has become the primary battleground, since stolen credentials let attackers operate without deploying recognizable malicious tooling.
Mitigation guidance comes down to tightening identity controls:
- Enforce phishing-resistant MFA such as FIDO2 security keys or passkeys where possible
- Monitor authentication logs for anomalous sign-ins and impossible-travel patterns
- Apply conditional access and least-privilege policies to limit what a single compromised account can reach
- Train users to verify sender domains and avoid credential entry from unsolicited links
Source: The Hacker News
Has your organization moved to phishing-resistant MFA, or are you still relying on codes and push prompts?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login