hxxps://us-east-1.console.aws.amazon[.]com/billing/home?region=us-east-1&state=hashArgs%23%2Faccount&isauthcode=trueURL
Reported by 1 independent source · first reported by Datadog Security Labs · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Password spraying campaign targets AWS root user accounts across 150+ organizations“"LoginTo": "hxxps://us-east-1.console.aws.amazon[.]com/billing/home?region=us-east-1&state=hashArgs%23%2Faccount&isauthcode=true",”
Indicators reported together
named in the same reports- signin.amazonaws[.]comin 1 report
Copy this indicator · defanged
Thanks — we review every report.