N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

A newly identified phishing campaign, attributed to a threat actor group called N0va, is targeting businesses across North America and Europe. According to a report from The Hacker News, the campaign impersonates trusted services and abuses legitimate authentication flows to compromise user accounts. The approach is notable for its reliance on identity-based tactics rather than traditional malware, making it harder for conventional defenses to detect.

The exact scale of the campaign and specific victims have not been disclosed, but the report indicates that successful attacks can give threat actors access to valid accounts, which can then be used to pivot into sensitive data, business systems, and cloud resources. The campaign appears to leverage phishing techniques that trick users into entering credentials or approving multi-factor authentication (MFA) prompts, a common method in adversary-in-the-middle (AiTM) attacks.

While no specific CVEs or product vulnerabilities are associated with this campaign, the threat highlights the growing challenge of identity security in the face of sophisticated phishing kits. Organizations are advised to implement phishing-resistant MFA, enhance user awareness, and monitor for anomalous authentication activity.

The report is based on a single source, and details such as the campaign's technical specifics, scale, and victimology remain unverified. Further investigation is needed to fully understand the scope and methods of N0va's operations.