TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Bleeping Computer

Amazon SES increasingly abused in phishing to evade detection

Bill Toulas · 2 days ago · Read original ↗

ATT&CK techniques detected

3 predictions
T1566.002Spearphishing Link
96%
"amazon ses increasingly abused in phishing to evade detection the amazon simple email service ( ses ) is being increasingly abused to send convincing phishing emails that can bypass standard security filters and render reputation - based blocks ineffective. although the resource …"
T1566.002Spearphishing Link
76%
"is designed to scan for leaked secrets. threat actors now rely on automated attacks that streamline secret scanning, permission validation, and email distribution, enabling unprecedented levels of abuse. “ after verifying the key ’ s permissions and email sending limits, attacker…"
T1566Phishing
45%
"is designed to scan for leaked secrets. threat actors now rely on automated attacks that streamline secret scanning, permission validation, and email distribution, enabling unprecedented levels of abuse. “ after verifying the key ’ s permissions and email sending limits, attacker…"

Summary

The Amazon Simple Email Service (SES) is being increasingly abused to send convincing phishing emails that can bypass standard security filters and render reputation-based blocks ineffective. [...]