← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Malicious Google Ads Target AWS Logins
WHITE AlienVault 2023-02-09 Modified: 2023-02-09
5
IOCs
LOW VOLUME
Over the last weeks, Google Ads, one of the largest online advertising platforms, has become a popular target for malvertising campaigns. In this analysis, researchers at Sentinel One, examine a recent malicious Google Ads campaign targeting Amazon Web Services (AWS) logins through fraudulent credential phishing websites.
aws phishinggoogle adsmalvertisingphishing
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (5)
All URL domain
TYPEINDICATORDESCRIPTIONCREATED
URL http://aws1-console-login.us/login — 2023-02-09
domain aws1-console-login.us — 2023-02-09
domain aws1-ec2-console.com — 2023-02-09
domain aws1-us-west.info — 2023-02-09
domain aws2-console-login.xyz — 2023-02-09
References (1)
↗ https://www.sentinelone.com/blog/cloud-credentials-phishing-malicious-google-ads-target-aws-logins/