Amazon SES Exploited in Rising Phishing Attacks
In a concerning trend, threat actors are increasingly abusing Amazon Simple Email Service (SES) to launch sophisticated phishing attacks. This method allows them to send deceptive emails that can easily evade security filters, making them appear legitimate.
Recent research from Kaspersky highlights a surge in these phishing attempts, driven by the exposure of AWS Identity and Access Management access keys found in public repositories. Attackers are using automated tools to find these keys and send large volumes of emails that mimic trusted services, such as document-signing notifications from DocuSign.
The impact of this attack strategy is significant, affecting businesses that may fall victim to financial scams or data breaches. To protect against these threats, companies are advised to limit IAM permissions, enable multi-factor authentication, regularly rotate access keys, and implement encryption controls.
Risk Level: High
Source: View Original Report
