AWS Typosquatted Phishing Domain DNS Query

Tim Peck@timpeck

•updated Mar 11, 2026•11•2•70

Detects DNS queries for domains associated with an active adversary-in-the-middle (AiTM) phishing campaign targeting AWS credentials.