Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond
Brief
Datadog Security Research investigates a June 2026 adversary-in-the-middle phishing campaign that cloned the AWS console login page to harvest victim credentials and multi-factor authentication codes.