New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs

Recently, ANY.RUN researchers uncovered N0va, a new phishkit targeting organizations across North America and the EU, including government, technology, consulting, and healthcare. What makes N0va especially relevant for SOC leaders is how it spreads the attack across different layers. Legitimate authentication, trusted brand lures, compromised websites, and cloud infrastructure can leave security teams with only part of the picture, making it easier to miss account compromise and harder to investigate the full chain. N0va relies on lures that imitate tools employees use every day, including Microsoft Teams, SharePoint, OneDrive, DocuSign, Google Drive, Dropbox, Zoom, and Adobe Sign. In one ANY.RUN sandbox…