AWS AiTM Phishing Kit Steals Console Credentials and MFA Codes in Real Time

A newly discovered phishing kit is targeting Amazon Web Services users by silently stealing login credentials and multi-factor authentication codes the moment a victim types them in. Unlike older tools that captured passwords for later use, this kit works in real time, meaning attackers can access a victim’s AWS console before the victim realizes something […] The post AWS AiTM Phishing Kit Steals Console Credentials and MFA Codes in Real Time appeared first on Cyber Security News.