<![CDATA[N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security]]>A phishing toolkit tracked as N0va is being used against organizations across North America and Europe, impersonating trusted services and abusing legitimate authentication flows to gain access to valid accounts. Because the attacks ride on normal login paths rather than obvious malware, the activity is harder for defenders to flag through conventional endpoint detection.

Once a single identity is compromised, the actor gains a foothold that can extend to sensitive data, business systems, and additional cloud resources, turning one valid account into a broader intrusion path. The campaign underscores how identity has become the primary battleground, since stolen credentials let attackers operate without deploying recognizable malicious tooling.

Mitigation guidance comes down to tightening identity controls:

  • Enforce phishing-resistant MFA such as FIDO2 security keys or passkeys where possible
  • Monitor authentication logs for anomalous sign-ins and impossible-travel patterns
  • Apply conditional access and least-privilege policies to limit what a single compromised account can reach
  • Train users to verify sender domains and avoid credential entry from unsolicited links

Source: The Hacker News

Has your organization moved to phishing-resistant MFA, or are you still relying on codes and push prompts?

]]>https://xploitlk.com/topic/410/n0va-phishkit-targets-us-and-eu-businesses-a-new-challenge-for-identity-securityRSS for NodeTue, 27 Oct 2026 08:18:36 GMTMon, 21 Sep 2026 04:30:22 GMT60