Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond

A sophisticated phishing campaign leveraged adversary-in-the-middle (AiTM) techniques and convincing AWS console clones to harvest both credentials and real-time MFA codes from carefully selected engineering targets, making AWS console phishing a critical and ongoing threat.