N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat actors access to valid accounts without relying on obvious malware activity. From there, a single compromised identity can open the door to sensitive data, business systems, and additional cloud

Reported facts: The N0va phishing kit is used in campaigns across North America and Europe that impersonate trusted services and abuse legitimate authentication flows, enabling attackers to obtain valid account access without obvious malware activity. A single compromised identity can then expose sensitive data, business systems, and additional cloud resources. RealGround analysis: While the article describes identity-focused phishing rather than a specific AI system compromise, similar attacks can be used to hijack AI-driven business tools and cloud-hosted AI services by stealing user credentials. Organizations should integrate AI CISO advisory and continuous red teaming to ensure identity protections, MFA enforcement, and phishing-resistant authentication are applied to all AI-related accounts and admin consoles.