Tag: email service

1 Attack Reports | 0 Vulnerabilities

Attack reports

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover

An AWS access key compromise led to a sophisticated SES abuse campaign in May 2025. The attacker exploited the stolen key to bypass SES restrictions, verify new sender identities, and conduct a large-scale phishing operation. They used multi-regional PutAccountDetails requests to escape the SES san…
phishing
cloud security
aws
sandbox escape
2025-09-04
email service
Published: September 4, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports