#JavaGhostPhishing
Article: https://thehackernews.com/2025/03/hackers-exploit-aws-misconfigurations.html

JavaGhost uses exposed AWS IAM keys in misconfigured accounts to launch phishing attacks via Amazon SES/WorkMail. Victim infrastructure is leveraged to mask origin and avoid costs; no AWS vulnerabilities are exploited.#JavaGhostPhishing