Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond

Datadog Security LabsJune 24, 2026Threat Intel Cloud Identity

Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.

Summary from Datadog Security Labs.

Read the full article at Datadog Security Labs

Explained

The technology and terms in this story. Learn more

Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet