Phishing Lure Pages Impersonating AWS Console or Apple ID/iCloud Sign-in Portal

Ethan Andrews@eandrews

•updated Aug 3, 2026•1•0•1

Detects email-delivered URLs and network connections to phishing lure infrastructure masquerading as AWS console or Apple ID/iCloud sign-in pages used to funnel victims into the DarkSword iOS exploit chain.