AiTM Phishing Kits Steal Console Credentials and MFA Codes from AWS Environments

A newly discovered phishing kit is targeting Amazon Web Services users by silently stealing login credentials and multi-factor authentication codes the moment a victim types them in. Unlike older tools that captured passwords for later use, this kit works in real time, meaning attackers can access a victim’s AWS console before the victim realizes something […] The post AiTM Phishing Kits Steal Console Credentials and MFA Codes from AWS Environments appeared first on Cyber Security News.