Skip to content
Threat Feed
Subscribe

Tag

Ses

2 briefs RSS
medium advisory

Abuse of AWS SES Account-Level Email Sending

Threat actors with compromised AWS credentials may enable account-level email sending in Amazon SES to restore suspended infrastructure for mass phishing campaigns.

AWS SES cloud aws resource-development ses
1r 1t
medium advisory

Detection of AWS SES Identity Verify-Use-Delete Abusive Pattern

Adversaries with unauthorized access to AWS Simple Email Service (SES) credentials may verify an attacker-controlled identity, send phishing or spam emails, and promptly delete the identity to evade detection and attribution.

Simple Email Service +2 cloud aws ses resource-development defense-evasion discovery credential-abuse
1r 3t updated