- Report claims attackers are hijacking exposed AWS credentials to send large‑scale phishing emails via Amazon SES
- Malicious messages bypass SPF, DKIM, and DMARC checks, landing directly in inboxes
- Researchers warn the trend is growing, urging stricter IAM practices and key management
Security experts from Kaspersky have claimed the Amazon Simple Email Service (SES) is being abused to launch phishing attacks which easily bypass current defenses and expose victims to risks of credential and identity theft
