News Summary

• N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services.
• Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity.
• A single compromised identity can open the door to sensitive data, business systems, and additional cloud resources.
• The longer that access goes unnoticed, the greater the potential for wider compromise, operational disruption, and financial loss.
• N0va activity has been observed across organizations in government, technology, consulting, healthcare, and other sectors.